Plone CVE-2011-0720 Remote Security Bypass Vulnerability

Bugtraq ID:	46102
Class:	Design Error
CVE:	CVE-2011-0720
Remote:	Yes
Local:	No
Published:	Feb 02 2011 12:00AM
Updated:	Apr 18 2011 07:44PM
Credit:	Reported by the vendor
Vulnerable:	Red Hat Cluster Suite WS 4 Red Hat Cluster Suite ES 4 Red Hat Cluster Suite AS 4 Plone Plone 3.3.5 Plone Plone 3.3.4 Plone Plone 3.3.3 Plone Plone 3.3.2 Plone Plone 3.3.1 Plone Plone 3.2.3 Plone Plone 3.2.2 Plone Plone 3.1.6 Plone Plone 3.0.4 Plone Plone 3.0.3 Plone Plone 3.0.2 Plone Plone 3.0.1 Plone Plone 2.5.4 Plone Plone 2.5.1 Plone Plone 4.0 Plone Plone 3.3 Plone Plone 3.2 Plone Plone 3.1 Plone Plone 3.0 Plone Plone 2.5-beta1 Plone Plone 2.5
Not Vulnerable:

Plone CVE-2011-0720 Remote Security Bypass Vulnerability

Plone is prone to a remote security-bypass vulnerability.

Exploiting this issue may allow a remote attacker to bypass certain security restrictions and perform unauthorized actions.

Plone versions 2.5 through 4.0 are vulnerable; other versions may also be affected.

Plone CVE-2011-0720 Remote Security Bypass Vulnerability

An attacker can exploit this issue using a browser.

Plone CVE-2011-0720 Remote Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Plone CVE-2011-0720 Remote Security Bypass Vulnerability

References:

• Plone CVE-2011-0720 details (Mark Jenkins )
  
• Plone Homepage (Plone)
  
• Plone Security Advisory (Plone)