Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2011-3587

Good to know:

icon

Date: October 10, 2011

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

Language: Python

Severity Score

Related Resources (15)

https://bugzilla.redhat.com/show_bug.cgi?id=742297
https://github.com/zopefoundation/Zope/commit/491a583d8c6622b80c75917e5017c4bb4b15e477
http://plone.org/products/plone-hotfix/releases/20110928
http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0
http://plone.org/products/plone/security/advisories/20110928
http://secunia.com/advisories/46323
http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587
https://github.com/zopefoundation/Zope
http://secunia.com/advisories/46221
https://github.com/pypa/advisory-database/tree/main/vulns/products-plonehotfix20110928/PYSEC-2011-26.yaml
https://github.com/zopefoundation/Zope/commit/6bb2fb3c04a76b00bec9bd7c069733e06fa6ebe9
https://nvd.nist.gov/vuln/detail/CVE-2011-3587
https://web.archive.org/web/20111013043934/http://zope2.zope.org/news/security-vulnerability-announcement-cve-2011-3587
http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zip
https://www.mend.io/vulnerability-database/CVE-2011-3587

Severity Score

Weakness Type (CWE)

Insufficient Information

NVD-CWE-noinfo

Top Fix

icon

Upgrade Version

Upgrade to version zope2 - 2.12.20;zope2 - 2.13.10

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us