Plone CatalogTool Information Disclosure Vulnerability
BID:64220
Info
Plone CatalogTool Information Disclosure Vulnerability
| Bugtraq ID: | 64220 |
| Class: | Access Validation Error |
| CVE: |
CVE-2013-7061 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 10 2013 12:00AM |
| Updated: | Dec 13 2013 12:27AM |
| Credit: | Richard Mitchell of Plone Security Team |
| Vulnerable: |
Plone Plone 4.1.3 Plone Plone 4.0.8 Plone Plone 4.0.7 Plone Plone 3.3.5 Plone Plone 3.3.4 Plone Plone 3.3.3 Plone Plone 3.3.2 Plone Plone 3.3.1 Plone Plone 4.2 Plone Plone 4.1 Plone Plone 4.0.5 Plone Plone 4.0.2 Plone Plone 4.0 Plone Plone 3.3 |
| Not Vulnerable: | |
Discussion
Plone CatalogTool Information Disclosure Vulnerability
Plone is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.
Plone is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.
Exploit / POC
Plone CatalogTool Information Disclosure Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Plone CatalogTool Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.