← Back

CVE-2002-0170

nvd nist
Published: Apr 22, 2002Modified: Apr 16, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.

Affected (17)

Products: Zope: Zope
Zope
1 product
Zope
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Zope
Zope
Version 2.2.0
Zope
Version 2.2.1
Zope
Version 2.2.2
Zope
Version 2.2.3
Zope
Version 2.2.4
Zope
Version 2.2.5
Zope
Version 2.3.0
Zope
Version 2.3.1
Zope
Version 2.3.2
Zope
Version 2.3.3
Zope
Version 2.4.0
Zope
Version 2.4.1
Zope
Version 2.4.2
Zope
Version 2.4.3
Zope
Version 2.4.4b1
Zope
Version 2.5.0
Zope
Version 2.5.1b1

References (12)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.