Unscored severity · published Feb 3, 2011
CVE-2011-0720
Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create…
–
CVSS
3.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Conga · Redhat
All versions, or not specified · source: NVD
LU
Luci · Redhat
All versions, or not specified · source: NVD
PL
Plone · Plone
2.5; 2.5.1; 2.5.2; 2.5.3; 2.5.4; 2.5.5; +26 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0720
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0720
osvdb.org
http://osvdb.org/70753
Vendor Advisory
http://plone.org/products/plone/security/advisories/cve-2011-0720
Vendor Advisory
http://secunia.com/advisories/43146
Vendor Advisory
http://secunia.com/advisories/43914
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2011-0393.html
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2011-0394.html
More from Plone
9.9
CVE-2021-33509
Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script
9.8
CVE-2020-35190
The official plone Docker images before version of 4.3.18-alpine (Alpine specific) contain a blank password for a root user
9.8
CVE-2020-7941
A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission
8.8
CVE-2021-33926
An issue in Plone CMS v
8.8
CVE-2021-32633
Zope is an open-source web application server