CVE-2002-0170 in Zope

Riassunto

di MITRE

Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.

Be aware that VulDB is the high quality source for vulnerability data.

• Divulgazione: 22/04/2002
• Moderazione: accettato
• Voce: VDB-18084
• CPE: pronto
• CWE: CWE-269 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.01571
• KEV: no
• Attività: molto basso
• Settore: Transportation, Education, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0170
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0170
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0170/