Description

Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."

Remediation

References

CVE-2006-4249

Related Vulnerabilities

ownCloud Improper Authentication Vulnerability (CVE-2014-9043)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-3141)

Ruby on Rails CVE-2022-23634 Vulnerability (CVE-2022-23634)

Plone CMS Other Vulnerability (CVE-2012-5486)

WordPress Plugin Wp-FileManager 'ajaxfilemanager.php' Arbitrary File Upload (1.2)

Severity

Medium

Classification

CVE-2006-4249

Tags

Missing Update Known Vulnerabilities