p PatchFirst

CVE-2011-1950

CVE-2011-1950

This page contains facts from public vulnerability sources. Check the original advisory before updating.

plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.

CVSS 7.1 · High · EPSS 2.3% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • plone-app-users PyPI

    Versions
    • 1.0
    • 1.0.1
    • 1.0.2
    • 1.0.3
    • 1.0.4
    • 1.0a1
    • 1.0a2
    • 1.0a3
    • 1.0b1
    • 1.0b2
    • 1.0b3
    • 1.0b4
    • 1.0b5
    • 1.0b6
    • 1.0b7
    • 1.0b8
    • 1.0b9
    Affected ranges
    • ECOSYSTEM: ≥ 1.0a1, < 1.0.5

    Update to 1.0.5

  • plone-app-users PyPI

    Versions
    • 1.1
    • 1.1b1
    • 1.1b2
    Affected ranges
    • ECOSYSTEM: ≥ 1.1b1, < 1.1.1

    Update to 1.1.1

  • plone PyPI

    Versions
    • 4.0.1
    • 4.0.2
    • 4.0.3
    • 4.0.4
    • 4.0.5
    Affected ranges
    • ECOSYSTEM: ≥ 4.0.1, < 4.0.6

    Update to 4.0.6

  • plone PyPI

    Versions
    • 4.1
    Affected ranges
    • ECOSYSTEM: ≥ 4.1.0, < 4.1.1

    Update to 4.1.1

  • plone PyPI

    Versions
    • 3.2
    • 3.2.1
    • 3.2.2
    • 3.2.3
    • 3.2a1
    • 3.2rc1
    • 3.3
    • 3.3.1
    • 3.3.2
    • 3.3.3
    • 3.3.4
    • 3.3.5
    • 3.3.6
    • 3.3b1
    • 3.3rc1
    • 3.3rc2
    • 3.3rc3
    • 3.3rc4
    • 3.3rc5
    • 4.0
    • 4.0.1
    • 4.0.10
    • 4.0.2
    • 4.0.3
    • 4.0.4
    • 4.0.5
    • 4.0.6
    • 4.0.7
    • 4.0.8
    • 4.0.9
    • 4.0a1
    • 4.0a2
    • 4.0a3
    • 4.0a4
    • 4.0a5
    • 4.0b1
    • 4.0b2
    • 4.0b3
    • 4.0b4
    • 4.0b5
    • 4.0rc1
    • 4.1
    • 4.1a1
    • 4.1a2
    • 4.1a3
    • 4.1b1
    • 4.1b2
    • 4.1rc2
    • 4.1rc3
    Affected ranges
    • ECOSYSTEM: < 4.1.1

    Update to 4.1.1

  • plone-app-users PyPI

    Versions
    • 1.0
    • 1.0.1
    • 1.0.2
    • 1.0.3
    • 1.0.4
    • 1.0a1
    • 1.0a2
    • 1.0a3
    • 1.0b1
    • 1.0b2
    • 1.0b3
    • 1.0b4
    • 1.0b5
    • 1.0b6
    • 1.0b7
    • 1.0b8
    • 1.0b9
    • 1.1
    • 1.1b1
    • 1.1b2
    Affected ranges
    • ECOSYSTEM: ≥ 1.0a1, < 1.0.5 ∪ ≥ 1.1b1, < 1.1.1

    Update to 1.0.5; Update to 1.1.1

Original sources

Check your server →