Unscored severity · published Apr 23, 2009
CVE-2009-0662
The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the…
–
CVSS
1%
EPSS
No
On KEV
Description
The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PL
Plonepas · Plone
3.0; 3.1; 3.2; 3.3; 3.4; 3.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0662
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0662
osvdb.org
http://osvdb.org/53975
Patch
http://plone.org/products/plone/security/advisories/cve-2009-0662
Vendor Advisory
http://secunia.com/advisories/34840
www.securityfocus.com
http://www.securityfocus.com/bid/34664
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/50061