medium5.5
CVE-2013-7061
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspeci…
Impact
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plone | Plone | Versions 3.3, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.3.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2013/12/10/15
- http://www.openwall.com/lists/oss-security/2013/12/12/3
- https://plone.org/security/20131210/catalogue-exposure
- http://www.openwall.com/lists/oss-security/2013/12/10/15
- http://www.openwall.com/lists/oss-security/2013/12/12/3
- https://plone.org/security/20131210/catalogue-exposure