NetSight
IP …
critical9.3

CVE-2011-4030

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, whic…

Impact

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.

Affected products

VendorProductAffected versions
PloneCmfeditions
Versions 2.0a1, 2.0b1, 2.0b2, 2.0b3, 2.0b4, 2.0b5
PlonePlone
Versions 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5

Weakness classification

CWE-264

References