CVE-2011-4030
10.10.2011, 10:55
The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.Enginsight
| Vendor | Product | Version |
|---|---|---|
| plone | cmfeditions | 2.0a1:a1 |
| plone | cmfeditions | 2.0b1:b1 |
| plone | cmfeditions | 2.0b2:b2 |
| plone | cmfeditions | 2.0b3:b3 |
| plone | cmfeditions | 2.0b4:b4 |
| plone | cmfeditions | 2.0b5:b5 |
| plone | cmfeditions | 2.0b6:b6 |
| plone | cmfeditions | 2.0b7:b7 |
| plone | cmfeditions | 2.0b8:b8 |
| plone | cmfeditions | 2.0b9:b9 |
| plone | plone | 4.0 |
| plone | plone | 4.0.1 |
| plone | plone | 4.0.2 |
| plone | plone | 4.0.3 |
| plone | plone | 4.0.4 |
| plone | plone | 4.0.5 |
| plone | plone | 4.0.6.1 |
| plone | plone | 4.0.7 |
| plone | plone | 4.0.8 |
| plone | plone | 4.0.9 |
| plone | plone | 4.1 |
| plone | plone | 4.2 |
| plone | plone | 4.2a1:a1 |
| plone | plone | 4.2a2:a2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References