CVE-2013-7061 in Plone
Summary
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
12/11/2013
Disclosure
05/02/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11479 | Plone CMF CatalogTool access control | 264 | Not defined | Official fix | CVE-2013-7061 |