Vulnerability Description
Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Plone | Plone | 2.5 |
| Redhat | Conga | All versions |
| Redhat | Luci | All versions |
References
- http://osvdb.org/70753
- http://plone.org/products/plone/security/advisories/cve-2011-0720Vendor Advisory
- http://secunia.com/advisories/43146Vendor Advisory
- http://secunia.com/advisories/43914Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-0393.html
- http://www.redhat.com/support/errata/RHSA-2011-0394.html
- http://www.securityfocus.com/bid/46102
- http://www.securitytracker.com/id?1025258
- http://www.vupen.com/english/advisories/2011/0796Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65099
- http://osvdb.org/70753
- http://plone.org/products/plone/security/advisories/cve-2011-0720Vendor Advisory
- http://secunia.com/advisories/43146Vendor Advisory
- http://secunia.com/advisories/43914Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-0393.html
FAQ
What is CVE-2011-0720?
CVE-2011-0720 is a vulnerability with a CVSS score of 7.5 (HIGH). Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and ...
How severe is CVE-2011-0720?
CVE-2011-0720 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-0720?
Check the references section above for vendor advisories and patch information. Affected products include: Plone Plone, Redhat Conga, Redhat Luci.