Plone Privilege escalation due improper authorization

Multiple unspecified vulnerabilities in 1 dataitems.py, 2 get.py, and 3 traverseName.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users with administrator access to a subtree to access nodes above the subtree via unknown vectors...

CVE-2013-4189

CVE-2013-4189: Affects Plone components dataitems.py, get.py, and traverseName.py across Plone versions 2.1–4.1, 4.2.x–4.2.5, and 4.3.x–4.3.1. Description indicates remote authenticated users with administrator access can access nodes above a subtree via unknown vectors. The connected advisories ...