GitHub Advisoryadvisory · PyPI

GHSA-pq3x-96c3-xgjg Moderate severity vulnerability that affects Products.PlonePAS

MEDIUM Published 2018-07-23 Modified 2026-06-06 Official page ↗
Aliases
CVE-2009-0662
Ecosystem
PyPI
Packages
Products.PlonePAS
Severity
Moderate
Weaknesses
CWE-287
Reviewed
2020-06-16

Affected packages

• PyPI Products.PlonePAS: >= 3, < 3.9 → fixed in 3.9

Description

The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2009-0662 The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows… vulnerability

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References