Plone up to 4.3.2 CMF CatalogTool access control

Summaryinfo

A vulnerability classified as problematic has been found in Plone. The affected element is the function CatalogTool of the component CMF. This manipulation causes access control. The identification of this vulnerability is CVE-2013-7061. There is no exploit available. It is recommended to apply a patch to fix this issue.

Detailsinfo

A vulnerability has been found in Plone (Content Management System) and classified as problematic. Affected by this vulnerability is the function CatalogTool of the component CMF. The manipulation with an unknown input leads to a access control vulnerability. The CWE definition for the vulnerability is CWE-264. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.

The weakness was shared 12/10/2013 by Richard Mitchell with Plone Security Team as Privilege escalation through exposed underlying API as confirmed advisory (Website). It is possible to read the advisory at plone.org. This vulnerability is known as CVE-2013-7061 since 12/11/2013. The exploitation appears to be difficult. The attack can be launched remotely. Required for exploitation is a single authentication. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at OSVDB (100833†). The entries VDB-11480, VDB-11478 and VDB-11477 are related to this item. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Content Management System

Name

• Plone

Version

• 3.3
• 3.3.1
• 3.3.2
• 3.3.3
• 3.3.4
• 3.3.5
• 3.3.6
• 4.0
• 4.0.1
• 4.0.2
• 4.0.3
• 4.0.4
• 4.0.5
• 4.0.7
• 4.0.9
• 4.1
• 4.1.1
• 4.1.2
• 4.1.3
• 4.1.4
• 4.1.5
• 4.1.6
• 4.2
• 4.2.1
• 4.2.2
• 4.2.3
• 4.2.4
• 4.2.5
• 4.2.6
• 4.2.7
• 4.3
• 4.3.1
• 4.3.2

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion