CVE-2011-0720
Fixed in a distro release EPSS 3%
Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.
Products: plone, redhat conga, redhat luci
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | plone | 4.0.4 |
| PyPI | plone | 4.0.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel cluster 4 | conga | 0:0.11.2-4.el4.2 |
| Red Hat rhel cluster 4 | conga-debuginfo | 0:0.11.2-4.el4.2 |
| Red Hat rhel cluster 4 | luci | 0:0.11.2-4.el4.2 |
| Red Hat rhel cluster 4 | ricci | 0:0.11.2-4.el4.2 |
| Red Hat rhel cluster 5 | conga | 0:0.12.2-24.el5_6.1 |
| Red Hat rhel cluster 5 | conga-debuginfo | 0:0.12.2-24.el5_6.1 |
| Red Hat rhel cluster 5 | luci | 0:0.12.2-24.el5_6.1 |
| Red Hat rhel cluster 5 | ricci | 0:0.12.2-24.el5_6.1 |