Vulnerabilities > CVE-2011-2528 - Remote Security vulnerability in Zope

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

plone

zope

NVD

Published: 2011-07-19

Updated: 2011-07-25

Summary

Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly serious vulnerability." NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-0720.

Vulnerable Configurations

Part	Description	Count
Application	Plone Plone Plone Hotfix 20110720 * Plone Plone 3.0 Plone Plone 3.0.1 Plone Plone 3.0.2 Plone Plone 3.0.3 Plone Plone 3.0.4 Plone Plone 3.0.5 Plone Plone 3.0.6 Plone Plone 3.1 Plone Plone 3.1.1 Plone Plone 3.1.2 Plone Plone 3.1.3 Plone Plone 3.1.4 Plone Plone 3.1.5.1 Plone Plone 3.1.6 Plone Plone 3.1.7 Plone Plone 3.2 Plone Plone 3.2.1 Plone Plone 3.2.2 Plone Plone 3.2.3 Plone Plone 3.3 Plone Plone 3.3.1 Plone Plone 3.3.2 Plone Plone 3.3.3 Plone Plone 3.3.4 Plone Plone 3.3.5 Plone Plone 3.3.6 Plone Plone 4.0 Plone Plone 4.0.1 Plone Plone 4.0.2 Plone Plone 4.0.3 Plone Plone 4.0.4 Plone Plone 4.0.5 Plone Plone 4.0.6.1 Plone Plone 4.0.7 Plone Plone 4.0.8 Plone Plone 4.1	37
Application	Zope Zope Zope 2.12.0 Zope Zope 2.12.1 Zope Zope 2.12.2 Zope Zope 2.12.3 Zope Zope 2.12.4 Zope Zope 2.12.5 Zope Zope 2.12.6 Zope Zope 2.12.7 Zope Zope 2.12.8 Zope Zope 2.12.9 Zope Zope 2.12.10 Zope Zope 2.12.11 Zope Zope 2.12.12 Zope Zope 2.12.13 Zope Zope 2.12.14 Zope Zope 2.12.15 Zope Zope 2.12.16 Zope Zope 2.12.17 Zope Zope 2.12.18 Zope Zope 2.13.0 Zope Zope 2.13.1 Zope Zope 2.13.2 Zope Zope 2.13.3 Zope Zope 2.13.4 Zope Zope 2.13.5 Zope Zope 2.13.6 Zope Zope 2.13.7	41

Summary

Vulnerable Configurations

References