NVD

Id
10572  
Name
CVE-2011-4030  
Description
The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-10-10  
Modified Date
2011-10-29  
Seq
2011-4030  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
59828 10572 CVE-2011-4030 http://plone.org/products/plone-hotfix/releases/20110928  View
59829 10572 CVE-2011-4030 http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zip  View
59830 10572 CVE-2011-4030 http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0  View
59831 10572 CVE-2011-4030 50287  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32114 JVNDB-2011-002354 Plone の CMFEditions コンポーネントにおけるサブオブジェクトにアクセスされる脆弱性 Plone の CMFEditions コンポーネントは、KwAsAttributes クラスが発行されることを制限しないため、サブオブジェクトにアクセスされる脆弱性が存在します。 CVE-2011-4030 51937 CVE-2011-4030 10572 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002354.html 2011-10-04 2011-10-13 View