Lucene search
HistoryOct 10, 2011 - 10:55 a.m.
CVE-2011-4030
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.4
Confidence
Low
EPSS
0.967
Percentile
99.7%
The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.
Affected configurations
Node
plonecmfeditionsMatch2.0a1
ORplonecmfeditionsMatch2.0b1
ORplonecmfeditionsMatch2.0b2
ORplonecmfeditionsMatch2.0b3
ORplonecmfeditionsMatch2.0b4
ORplonecmfeditionsMatch2.0b5
ORplonecmfeditionsMatch2.0b6
ORplonecmfeditionsMatch2.0b7
ORplonecmfeditionsMatch2.0b8
ORplonecmfeditionsMatch2.0b9
ORploneploneMatch4.0
ORploneploneMatch4.0.1
ORploneploneMatch4.0.2
ORploneploneMatch4.0.3
ORploneploneMatch4.0.4
ORploneploneMatch4.0.5
ORploneploneMatch4.0.6.1
ORploneploneMatch4.0.7
ORploneploneMatch4.0.8
ORploneploneMatch4.0.9
ORploneploneMatch4.1
ORploneploneMatch4.2
ORploneploneMatch4.2a1
ORploneploneMatch4.2a2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| plone | cmfeditions | 2.0a1 | cpe:2.3:a:plone:cmfeditions:2.0a1:*:*:*:*:*:*:* |
| plone | cmfeditions | 2.0b1 | cpe:2.3:a:plone:cmfeditions:2.0b1:*:*:*:*:*:*:* |
| plone | cmfeditions | 2.0b2 | cpe:2.3:a:plone:cmfeditions:2.0b2:*:*:*:*:*:*:* |
| plone | cmfeditions | 2.0b3 | cpe:2.3:a:plone:cmfeditions:2.0b3:*:*:*:*:*:*:* |
| plone | cmfeditions | 2.0b4 | cpe:2.3:a:plone:cmfeditions:2.0b4:*:*:*:*:*:*:* |
| plone | cmfeditions | 2.0b5 | cpe:2.3:a:plone:cmfeditions:2.0b5:*:*:*:*:*:*:* |
| plone | cmfeditions | 2.0b6 | cpe:2.3:a:plone:cmfeditions:2.0b6:*:*:*:*:*:*:* |
| plone | cmfeditions | 2.0b7 | cpe:2.3:a:plone:cmfeditions:2.0b7:*:*:*:*:*:*:* |
| plone | cmfeditions | 2.0b8 | cpe:2.3:a:plone:cmfeditions:2.0b8:*:*:*:*:*:*:* |
| plone | cmfeditions | 2.0b9 | cpe:2.3:a:plone:cmfeditions:2.0b9:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2011-4030
2011-10-10 10:00:00
CVE-2011-3587
2011-10-10 10:00:00
github
github
Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable
2022-05-17 05:37:14
Zope Command Execution Vulnerability
2022-05-17 05:37:39
prion
prion
Design/Logic Flaw
2011-10-10 10:55:00
Design/Logic Flaw
2011-10-10 10:55:00
cve
cve
CVE-2011-4030
2011-10-10 10:55:06
CVE-2011-3587
2011-10-10 10:55:06
exploitpack
exploitpack
Plone and Zope - Remote Command Execution
2011-12-21 00:00:00
saint
saint
Plone Zope SAXutils Command Execution
2012-01-13 00:00:00
Plone Zope SAXutils Command Execution
2012-01-13 00:00:00
Plone Zope SAXutils Command Execution
2012-01-13 00:00:00
metasploit
metasploit
Plone and Zope XMLTools Remote Command Execution
2011-12-27 06:59:26
exploitdb
exploitdb
Plone and Zope - Remote Command Execution
2011-12-21 00:00:00
nvd
nvd
CVE-2011-3587
2011-10-10 10:55:06
seebug
seebug
Plone and Zope Remote Command Execution PoC
2014-07-01 00:00:00
Zopeζ‘ζΆ"cmd"εζ°θΏη¨ε½δ»€ζ§θ‘ζΌζ΄
2011-12-26 00:00:00
packetstorm
packetstorm
Plone and Zope Remote CMD Injection Exploit
2011-12-28 00:00:00
Plone / Zope Remote Command Execution
2011-12-21 00:00:00
dsquare
dsquare
Plone RCE
2012-01-26 00:00:00
osv
osv
Zope Command Execution Vulnerability
2022-05-17 05:37:39
nessus
nessus
Plone Request Parsing Remote Command Execution
2011-12-20 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_ZOPEPLONE
2011-10-10 10:55:00
checkpoint_advisories
checkpoint_advisories
Plone and Zope cmd Parameter Remote Command Execution (CVE-2011-3587)
2014-11-02 00:00:00
zdt
zdt
Plone and Zope Remote Command Execution PoC
2011-12-21 00:00:00
canvas
canvas
Immunity Canvas: PLONE
2011-10-10 10:55:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.4
Confidence
Low
EPSS
0.967
Percentile
99.7%
Related for NVD:CVE-2011-4030