NVD

Id
46617  
Name
CVE-2012-5489  
Description
The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-09-30  
Modified Date
2014-10-02  
Seq
2012-5489  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
233452 46617 CVE-2012-5489 [oss-security] 20121109 Re: Re: CVE Request - Zope / Plone: Multiple vectors corrected within 20121106 fix  View
233453 46617 CVE-2012-5489 https://bugs.launchpad.net/zope2/+bug/1079238  View
233454 46617 CVE-2012-5489 https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt  View
233455 46617 CVE-2012-5489 https://plone.org/products/plone-hotfix/releases/20121106  View
233456 46617 CVE-2012-5489 https://plone.org/products/plone/security/advisories/20121106/05  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30595 JVNDB-2012-006303 Plone で使用される Zope における制限された属性へのアクセス権を取得される脆弱性 Plone で使用される Zope の App.Undo.UndoSupport.get_request_var_or_attr 関数には、制限された属性へのアクセス権を取得される脆弱性が存在します。 CVE-2012-5489 58727 CVE-2012-5489 46617 6.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006303.html 2012-11-06 2014-10-03 View