Unscored severity · published Oct 10, 2011
CVE-2011-4030
The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote…
–
CVSS
2%
EPSS
No
On KEV
Description
The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Cmfeditions · Plone
2.0a1; 2.0b1; 2.0b2; 2.0b3; 2.0b4; 2.0b5; +4 more · source: NVD
PL
Plone · Plone
4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4030
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4030
Patch
http://plone.org/products/plone-hotfix/releases/20110928
Patch
http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zip
Patch
http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0
secunia.com
http://secunia.com/advisories/46323
www.securityfocus.com
http://www.securityfocus.com/bid/50287