CVEvulnerability

CVE-2011-4030

9.3 HIGH Published 2011-10-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-10-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264

Description

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.

Affected configurations

• plone cmfeditions 2.0a1 • plone cmfeditions 2.0b1 • plone cmfeditions 2.0b2 • plone cmfeditions 2.0b3 • plone cmfeditions 2.0b4 • plone cmfeditions 2.0b5 • plone cmfeditions 2.0b6 • plone cmfeditions 2.0b7 • plone cmfeditions 2.0b8 • plone cmfeditions 2.0b9 • plone plone 4.0 • plone plone 4.0.1 • plone plone 4.0.2 • plone plone 4.0.3 • plone plone 4.0.4 • plone plone 4.0.5 • plone plone 4.0.6.1 • plone plone 4.0.7 • plone plone 4.0.8 • plone plone 4.0.9 • plone plone 4.1 • plone plone 4.2 • plone plone 4.2a1 • plone plone 4.2a2

Related

Weakness · not in database (1)

References