Plone File Object Information Disclosure Vulnerability
BID:64246
Info
Plone File Object Information Disclosure Vulnerability
| Bugtraq ID: | 64246 |
| Class: | Design Error |
| CVE: |
CVE-2013-7060 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 10 2013 12:00AM |
| Updated: | Dec 13 2013 01:07AM |
| Credit: | Richard Mitchell of Plone Security Team |
| Vulnerable: |
Plone Plone 4.1.3 Plone Plone 4.0.8 Plone Plone 4.0.7 Plone Plone 3.3.5 Plone Plone 3.3.4 Plone Plone 3.3.3 Plone Plone 3.3.2 Plone Plone 3.3.1 Plone Plone 4.2 Plone Plone 4.1 Plone Plone 4.0.5 Plone Plone 4.0.2 Plone Plone 4.0 Plone Plone 3.3 |
| Not Vulnerable: | |
Discussion
Plone File Object Information Disclosure Vulnerability
Plone is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information like path information that may aid in launching further attacks.
Plone is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information like path information that may aid in launching further attacks.
Exploit / POC
Plone File Object Information Disclosure Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Plone File Object Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.