medium6.8
CVE-2015-7317
Kupu 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, and 4.2.0 through 4.2.7 allows remote authenticated users to edit Kupu settings.
Impact
Kupu 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, and 4.2.0 through 4.2.7 allows remote authenticated users to edit Kupu settings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kupu Project | Kupu | through 1.4.16 |
| Plone | Plone | Versions 3.3, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.3.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2015/09/22/15
- https://bugzilla.redhat.com/show_bug.cgi?id=1264799
- https://plone.org/security/hotfix/20150910
- https://plone.org/security/hotfix/20150910/privilege-escalation-in-kupu
- http://www.openwall.com/lists/oss-security/2015/09/22/15
- https://bugzilla.redhat.com/show_bug.cgi?id=1264799
- https://plone.org/security/hotfix/20150910
- https://plone.org/security/hotfix/20150910/privilege-escalation-in-kupu