CVE-2012-5497 in Plone
Summary
membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
10/24/2012
Disclosure
09/30/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 71679 | Plone User Account information disclosure | 200 | Not defined | Official fix | CVE-2012-5497 |