CVEvulnerability

CVE-2002-0170

7.5 HIGH Published 2002-04-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-04-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.

Affected configurations

• zope zope 2.2.0 • zope zope 2.2.1 • zope zope 2.2.2 • zope zope 2.2.3 • zope zope 2.2.4 • zope zope 2.2.5 • zope zope 2.3.0 • zope zope 2.3.1 • zope zope 2.3.2 • zope zope 2.3.3 • zope zope 2.4.0 • zope zope 2.4.1 • zope zope 2.4.2 • zope zope 2.4.3 • zope zope 2.4.4b1 • zope zope 2.5.0 • zope zope 2.5.1b1

References