NVD

Id
10197  
Name
CVE-2011-3587  
Description
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-10-10  
Modified Date
2011-10-20  
Seq
2011-3587  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
58396 10197 CVE-2011-3587 http://plone.org/products/plone-hotfix/releases/20110928  View
58397 10197 CVE-2011-3587 http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zip  View
58398 10197 CVE-2011-3587 http://plone.org/products/plone/security/advisories/20110928  View
58399 10197 CVE-2011-3587 http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0  View
58400 10197 CVE-2011-3587 http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587  View
58401 10197 CVE-2011-3587 https://bugzilla.redhat.com/show_bug.cgi?id=742297  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32115 JVNDB-2011-002355 Plone で使用される Zope における任意のコマンドを実行される脆弱性 Plone で使用される Zope には、任意のコマンドを実行される脆弱性が存在します。 CVE-2011-3587 51494 CVE-2011-3587 10197 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002355.html 2011-10-04 2011-10-13 View