CVE-2011-1950

Published: Jun 6, 2011Modified: Apr 29, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.

Affected (2)

Products: Plone: Plone

Plone

1 product

Plone

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Plone Plone	Version 4.0
Plone Plone	Version 4.1

Related CWEs

CWE-264

References (14)

http://osvdb.org/72729

Source: secalert@redhat.com

http://plone.org/products/plone/security/advisories/CVE-2011-1950

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/44775

Source: secalert@redhat.com

Vendor Advisory

http://securityreason.com/securityalert/8269

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/518155/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/48005

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/67695

Source: secalert@redhat.com

http://osvdb.org/72729