Vulnerabilities > CVE-2000-0725 - Unspecified vulnerability in Zope

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
zope
NVD
Published: 2000-10-20
Updated: 2008-09-10

Summary

Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.

Vulnerable Configurations

Part Description Count
Application
Zope
4

Redhat

advisories
rhsa
idRHSA-2000:052

References