CVEvulnerability
CVE-2011-1950
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-06-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:P
- Weaknesses
- CWE-264
Description
plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.
Affected configurations
• plone plone 4.0
• plone plone 4.1
Related
Weakness · not in database (1)
References
- http://osvdb.org/72729 osvdb.org
- http://plone.org/products/plone/security/advisories/CVE-2011-1950 Patch, Vendor Advisory
- http://secunia.com/advisories/44775 Vendor Advisory
- http://securityreason.com/securityalert/8269 securityreason.com
- http://www.securityfocus.com/archive/1/518155/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/48005 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67695 exchange.xforce.ibmcloud.com
- http://osvdb.org/72729 osvdb.org
- http://plone.org/products/plone/security/advisories/CVE-2011-1950 Patch, Vendor Advisory
- http://secunia.com/advisories/44775 Vendor Advisory
- http://securityreason.com/securityalert/8269 securityreason.com
- http://www.securityfocus.com/archive/1/518155/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/48005 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67695 exchange.xforce.ibmcloud.com