CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
99.7%
The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.
Vendor | Product | Version | CPE |
---|---|---|---|
plone | cmfeditions | 2.0a1 | cpe:2.3:a:plone:cmfeditions:2.0a1:*:*:*:*:*:*:* |
plone | cmfeditions | 2.0b1 | cpe:2.3:a:plone:cmfeditions:2.0b1:*:*:*:*:*:*:* |
plone | cmfeditions | 2.0b2 | cpe:2.3:a:plone:cmfeditions:2.0b2:*:*:*:*:*:*:* |
plone | cmfeditions | 2.0b3 | cpe:2.3:a:plone:cmfeditions:2.0b3:*:*:*:*:*:*:* |
plone | cmfeditions | 2.0b4 | cpe:2.3:a:plone:cmfeditions:2.0b4:*:*:*:*:*:*:* |
plone | cmfeditions | 2.0b5 | cpe:2.3:a:plone:cmfeditions:2.0b5:*:*:*:*:*:*:* |
plone | cmfeditions | 2.0b6 | cpe:2.3:a:plone:cmfeditions:2.0b6:*:*:*:*:*:*:* |
plone | cmfeditions | 2.0b7 | cpe:2.3:a:plone:cmfeditions:2.0b7:*:*:*:*:*:*:* |
plone | cmfeditions | 2.0b8 | cpe:2.3:a:plone:cmfeditions:2.0b8:*:*:*:*:*:*:* |
plone | cmfeditions | 2.0b9 | cpe:2.3:a:plone:cmfeditions:2.0b9:*:*:*:*:*:*:* |