Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts
plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-1950US | medium5.5 | — | ||
plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011… | ||||
02
references
External citations — patches, advisories, analysis.
- http://plone.org/products/plone/security/advisories/CVE-2011-1950WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67695WEB
- https://github.com/advisories/GHSA-2qx8-589j-gcpxADVISORY
- https://github.com/pypa/advisory-database/tree/main/vulns/plone/PYSEC-2011-16.yamlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2011-1950ADVISORY
- https://pypi.org/project/plone-app-usersPACKAGE
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan