Vulnerabilities > CVE-2013-4188 - Resource Management Errors vulnerability in Plone
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to "retrieving information for certain resources."
Vulnerable Configurations
Common Weakness Enumeration (CWE)
References
- http://plone.org/products/plone/security/advisories/20130618-announcement
- http://plone.org/products/plone/security/advisories/20130618-announcement
- http://plone.org/products/plone-hotfix/releases/20130618
- http://plone.org/products/plone-hotfix/releases/20130618
- http://seclists.org/oss-sec/2013/q3/261
- http://seclists.org/oss-sec/2013/q3/261
- https://bugzilla.redhat.com/show_bug.cgi?id=978449
- https://bugzilla.redhat.com/show_bug.cgi?id=978449