CVE-2011-0720
CVE-2011-0720
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.
CVSS 9.3 · Crítica · EPSS 3,2% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: python
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
plone PyPI
- Versiones
- 3.2
- 3.2.1
- 3.2.2
- 3.2.3
- 3.2a1
- 3.2rc1
- 3.3
- 3.3.1
- 3.3.2
- 3.3.3
- 3.3.4
- 3.3.5
- 3.3.6
- 3.3b1
- 3.3rc1
- 3.3rc2
- 3.3rc3
- 3.3rc4
- 3.3rc5
- 4.0
- 4.0.1
- 4.0.2
- 4.0.3
- 4.0a1
- 4.0a2
- 4.0a3
- 4.0a4
- 4.0a5
- 4.0b1
- 4.0b2
- 4.0b3
- 4.0b4
- 4.0b5
- 4.0rc1
- Intervalos de versiones afectados
- ECOSYSTEM: ≥ 2.5, < 4.0.4
Actualiza a 4.0.4
plone PyPI
- Versiones
- 3.2
- 3.2.1
- 3.2.2
- 3.2.3
- 3.2a1
- 3.2rc1
- 3.3
- 3.3.1
- 3.3.2
- 3.3.3
- 3.3.4
- 3.3.5
- 3.3.6
- 3.3b1
- 3.3rc1
- 3.3rc2
- 3.3rc3
- 3.3rc4
- 3.3rc5
- 4.0
- 4.0a1
- 4.0a2
- 4.0a3
- 4.0a4
- 4.0a5
- 4.0b1
- 4.0b2
- 4.0b3
- 4.0b4
- 4.0b5
- 4.0rc1
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.1
Actualiza a 4.0.1
Fuentes originales
- http://osvdb.org/70753
- http://plone.org/products/plone/security/advisories/cve-2011-0720
- http://www.securityfocus.com/bid/46102
- http://secunia.com/advisories/43146
- http://www.redhat.com/support/errata/RHSA-2011-0393.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65099
- http://www.vupen.com/english/advisories/2011/0796
- http://secunia.com/advisories/43914
- http://www.securitytracker.com/id?1025258
- http://www.redhat.com/support/errata/RHSA-2011-0394.html
- https://nvd.nist.gov/vuln/detail/CVE-2011-0720