Plone CVE-2013-4196 Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	61954
Class:	Design Error
CVE:	CVE-2013-4196
Remote:	Yes
Local:	No
Published:	Jul 31 2013 12:00AM
Updated:	Jul 31 2013 12:00AM
Credit:	Matthew Wilkes
Vulnerable:	Plone Plone 4.3.1 Plone Plone 4.1.3 Plone Plone 4.0.8 Plone Plone 4.0.7 Plone Plone 3.3.5 Plone Plone 3.3.4 Plone Plone 3.3.3 Plone Plone 3.3.1 Plone Plone 3.2.3 Plone Plone 3.1.4 Plone Plone 3.0.5 Plone Plone 3.0.4 Plone Plone 3.0.3 Plone Plone 3.0.2 Plone Plone 3.0.1 Plone Plone 2.5.5 Plone Plone 2.5.4 Plone Plone 2.5.1 Plone Plone 2.1.2 Plone Plone 2.0.5 Plone Plone 2.0.4 Plone Plone 4.2a2 Plone Plone 4.2a1 Plone Plone 4.2.5 Plone Plone 4.2.4 Plone Plone 4.2 Plone Plone 4.1 Plone Plone 4.0.9 Plone Plone 4.0.6.1 Plone Plone 4.0.5 Plone Plone 4.0.4 Plone Plone 4.0.3 Plone Plone 4.0.2 Plone Plone 4.0.1 Plone Plone 4.0 Plone Plone 3.3.2 Plone Plone 3.3 Plone Plone 3.2.2 Plone Plone 3.2.1 Plone Plone 3.2 Plone Plone 3.1.7 Plone Plone 3.1.6 Plone Plone 3.1.5.1 Plone Plone 3.1.3 Plone Plone 3.1.2 Plone Plone 3.1.1 Plone Plone 3.1 Plone Plone 3.0.6 Plone Plone 3.0 Plone Plone 2.5 Plone Plone 2.1.3 Plone Plone 2.1.1 Plone Plone 2.1 Plone Plone 2.0.2 Plone Plone 2.0.1 Plone Plone 1.0.6 Plone Plone 1.0.5 Plone Plone 1.0.4 Plone Plone 1.0.3 Plone Plone 1.0.2 Plone Plone 1.0.1
Not Vulnerable:

Plone CVE-2013-4196 Multiple Information Disclosure Vulnerabilities

Plone is prone to multiple information-disclosure vulnerabilities.

Attackers can exploit these issues to obtain sensitive information that may aid in launching further attacks.

Note: This issue was previously covered in BID 61544 (Plone Multiple Remote Security Vulnerabilities), but has been moved to its own record for better documentation.

Plone CVE-2013-4196 Multiple Information Disclosure Vulnerabilities

An attacker can exploit these issues using a web browser.

Plone CVE-2013-4196 Multiple Information Disclosure Vulnerabilities

References:

• Bug 978475 - (CVE-2013-4196) CVE-2013-4196 plone: Multiple information exposure (Red Hat Bugzilla)
  
• CVE Request -- Plone: 20130618 Hotfix (multiple vectors) (Jan Lieskovsky)
  
• Plone Homepage (Plone)
  
• Security vulnerability announcement: 20130618 - Multiple vectors (plone)