CVE-2011-0720 Plone Privilege Escalation Vulnerability
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi plone(PyPI) | >= 2.5, < 4.0.4 | 4.0.4 |
| pypi plone(PyPI) | = 3.2 | No fix listed |
| pypi plone(PyPI) | = 3.2.1 | No fix listed |
| pypi plone(PyPI) | = 3.2.2 | No fix listed |
| pypi plone(PyPI) | = 3.2.3 | No fix listed |
| pypi plone(PyPI) | = 3.2a1 | No fix listed |
| pypi plone(PyPI) | = 3.2rc1 | No fix listed |
| pypi plone(PyPI) | = 3.3 | No fix listed |
| pypi plone(PyPI) | = 3.3.1 | No fix listed |
| pypi plone(PyPI) | = 3.3.2 | No fix listed |
| pypi plone(PyPI) | = 3.3.3 | No fix listed |
| pypi plone(PyPI) | = 3.3.4 | No fix listed |
| pypi plone(PyPI) | = 3.3.5 | No fix listed |
| pypi plone(PyPI) | = 3.3.6 | No fix listed |
| pypi plone(PyPI) | = 3.3b1 | No fix listed |
| pypi plone(PyPI) | = 3.3rc1 | No fix listed |
| pypi plone(PyPI) | = 3.3rc2 | No fix listed |
| pypi plone(PyPI) | = 3.3rc3 | No fix listed |
| pypi plone(PyPI) | = 3.3rc4 | No fix listed |
| pypi plone(PyPI) | = 3.3rc5 | No fix listed |
| pypi plone(PyPI) | = 4.0 | No fix listed |
| pypi plone(PyPI) | = 4.0.1 | No fix listed |
| pypi plone(PyPI) | = 4.0.2 | No fix listed |
| pypi plone(PyPI) | = 4.0.3 | No fix listed |
| pypi plone(PyPI) | = 4.0a1 | No fix listed |
Show 45 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi plone(PyPI) | = 4.0a2 | No fix listed |
| pypi plone(PyPI) | = 4.0a3 | No fix listed |
| pypi plone(PyPI) | = 4.0a4 | No fix listed |
| pypi plone(PyPI) | = 4.0a5 | No fix listed |
| pypi plone(PyPI) | = 4.0b1 | No fix listed |
| pypi plone(PyPI) | = 4.0b2 | No fix listed |
| pypi plone(PyPI) | = 4.0b3 | No fix listed |
| pypi plone(PyPI) | = 4.0b4 | No fix listed |
| pypi plone(PyPI) | = 4.0b5 | No fix listed |
| pypi plone(PyPI) | = 4.0rc1 | No fix listed |
| pypi plone(PyPI) | < 4.0.1 | 4.0.1 |
| plone | = 2.5 | No fix listed |
| plone | = 2.5.1 | No fix listed |
| plone | = 2.5.2 | No fix listed |
| plone | = 2.5.3 | No fix listed |
| plone | = 2.5.4 | No fix listed |
| plone | = 2.5.5 | No fix listed |
| plone | = 3.0 | No fix listed |
| plone | = 3.0.1 | No fix listed |
| plone | = 3.0.2 | No fix listed |
| plone | = 3.0.3 | No fix listed |
| plone | = 3.0.4 | No fix listed |
| plone | = 3.0.5 | No fix listed |
| plone | = 3.0.6 | No fix listed |
| plone | = 3.1 | No fix listed |
| plone | = 3.1.1 | No fix listed |
| plone | = 3.1.2 | No fix listed |
| plone | = 3.1.3 | No fix listed |
| plone | = 3.1.4 | No fix listed |
| plone | = 3.1.5.1 | No fix listed |
| plone | = 3.1.6 | No fix listed |
| plone | = 3.1.7 | No fix listed |
| plone | = 3.2 | No fix listed |
| plone | = 3.2.1 | No fix listed |
| plone | = 3.2.2 | No fix listed |
| plone | = 3.2.3 | No fix listed |
| plone | = 3.3 | No fix listed |
| plone | = 3.3.1 | No fix listed |
| plone | = 3.3.2 | No fix listed |
| plone | = 3.3.3 | No fix listed |
| plone | = 3.3.4 | No fix listed |
| plone | = 3.3.5 | No fix listed |
| plone | = 4.0 | No fix listed |
| redhat conga | All versions | No fix listed |
| redhat luci | All versions | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- plone-unspec-priv-escalation(65099) vdb-entry
- github.com product
- github.com
- plone.org
- seclists.org
- web.archive.org
- web.archive.org
- web.archive.org
- 70753 vdb-entry
- plone.org vendor-advisory
- RHSA-2011:0393 vendor-advisory
- RHSA-2011:0394 vendor-advisory
- 43146 third-party-advisory vendor-advisory
- 46102 vdb-entry
- ADV-2011-0796 vdb-entry vendor-advisory
- 43914 third-party-advisory vendor-advisory
- 1025258 vdb-entry
- github.com vendor-advisory