VulnerabilityModified

CVE-2011-2528

Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly…

HIGH 7.5EPSS 2.03%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (2.03%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 2.03% probability · 80th percentile
CISA KEV: Not listed
Affected: plone/plone hotfix 20110720 · plone/plone · zope/zope
Source: secalert@redhat.com

References

http://plone.org/products/plone-hotfix/releases/20110622Patch, Vendor Advisory
http://plone.org/products/plone/security/advisories/20110622Patch, Vendor Advisory
http://secunia.com/advisories/45056Vendor Advisory
http://secunia.com/advisories/45111Vendor Advisory
http://www.openwall.com/lists/oss-security/2011/07/04/6Patch
http://www.openwall.com/lists/oss-security/2011/07/12/9Patch
https://bugzilla.redhat.com/show_bug.cgi?id=718824Patch
https://mail.zope.org/pipermail/zope-announce/2011-June/002260.htmlPatch
http://plone.org/products/plone-hotfix/releases/20110622Patch, Vendor Advisory
http://plone.org/products/plone/security/advisories/20110622Patch, Vendor Advisory
http://secunia.com/advisories/45056Vendor Advisory
http://secunia.com/advisories/45111Vendor Advisory
http://www.openwall.com/lists/oss-security/2011/07/04/6Patch
http://www.openwall.com/lists/oss-security/2011/07/12/9Patch
https://bugzilla.redhat.com/show_bug.cgi?id=718824Patch
https://mail.zope.org/pipermail/zope-announce/2011-June/002260.htmlPatch

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.