CVE

Id
58735  
CVE No.
CVE-2012-5492  
Status
Candidate  
Description
uid_catalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obtain metadata about hidden objects via a crafted URL.  
Phase
Assigned (20121024)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
600963 58735 CVE-2012-5492 MLIST:[oss-security] 20121109 Re: Re: CVE Request - Zope / Plone: Multiple vectors corrected within 20121106 fix  View
600964 58735 CVE-2012-5492 URL:http://www.openwall.com/lists/oss-security/2012/11/10/1  View
600965 58735 CVE-2012-5492 CONFIRM:https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt  View
600966 58735 CVE-2012-5492 CONFIRM:https://plone.org/products/plone-hotfix/releases/20121106  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30586 JVNDB-2012-006294 Plone の membership_tool.py におけるユーザアカウント名を列挙される脆弱性 Plone の membership_tool.py には、ユーザアカウント名を列挙される脆弱性が存在します。 CVE-2012-5497 58735 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006294.html  View