Zope Unspecified Security Bypass Vulnerability

Bugtraq ID:	48498
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 28 2011 12:00AM
Updated:	Jun 28 2011 12:00AM
Credit:	The vendor has reported this issue.
Vulnerable:	Zope Zope 2.12.3 Zope Zope 2.13 Zope Zope 2.12 Plone Plone 3.3.5 Plone Plone 3.3.4 Plone Plone 3.3.3 Plone Plone 3.3.2 Plone Plone 3.3.1 Plone Plone 3.2.3 Plone Plone 3.2.2 Plone Plone 3.1.6 Plone Plone 3.0.4 Plone Plone 3.0.3 Plone Plone 3.0.2 Plone Plone 3.0.1 Plone Plone 3.3 Plone Plone 3.2 Plone Plone 3.1 Plone Plone 3.0
Not Vulnerable:	Zope Zope 2.13.8 Zope Zope 2.12.19 Plone Plone 4.1 Plone Plone 4.0

Zope Unspecified Security Bypass Vulnerability

Zope is prone to an unspecified security-bypass vulnerability.

Attackers may exploit the issue to bypass certain unspecified security restrictions and gain unauthorized access.

Zope Unspecified Security Bypass Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Zope Unspecified Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Zope Unspecified Security Bypass Vulnerability

References:

• [Zope-Annce] Security Hotfix 20110622 released (Zope)
  
• Plone Homepage (Plone)
  
• Plone Hotfix 20110622 (Jun 28, 2011) (Plone)
  
• Zope Homepage (Zope)
  
• Security vulnerability announcement: Privilege escalation (Plone)