plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-1950US | medium5.5 | — | ||
plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011… | ||||
02
references
External citations — patches, advisories, analysis.
- http://osvdb.org/72729WEB
- http://plone.org/products/plone/security/advisories/CVE-2011-1950ADVISORY
- http://secunia.com/advisories/44775ADVISORY
- http://securityreason.com/securityalert/8269WEB
- http://www.securityfocus.com/archive/1/518155/100/0/threadedWEB
- http://www.securityfocus.com/bid/48005WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67695WEB
- https://github.com/advisories/GHSA-2qx8-589j-gcpxADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan