PyPI/plone CVE-2009-0662: unknown, EPSS 0.97%
The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrar
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0 | - | 3.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2009-17
- http://osvdb.org/53975
- http://www.securityfocus.com/bid/34664
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50061
- http://secunia.com/advisories/34840
- http://plone.org/products/plone/security/advisories/cve-2009-0662
CVE-2009-0662 · published · modified · JSON