CVE-2011-4030

Published: Oct 10, 2011Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.

Affected (24)

Products: Plone: Cmfeditions, Plone

Plone

2 products

Cmfeditions

Plone

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Plone Cmfeditions	Version 2.0a1
Plone Cmfeditions	Version 2.0b1
Plone Cmfeditions	Version 2.0b2
Plone Cmfeditions	Version 2.0b3
Plone Cmfeditions	Version 2.0b4
Plone Cmfeditions	Version 2.0b5
Plone Cmfeditions	Version 2.0b6
Plone Cmfeditions	Version 2.0b7
Plone Cmfeditions	Version 2.0b8
Plone Cmfeditions	Version 2.0b9
Plone Plone	Version 4.0.1
Plone Plone	Version 4.0.2
Plone Plone	Version 4.0.3
Plone Plone	Version 4.0.4
Plone Plone	Version 4.0.5
Plone Plone	Version 4.0.6.1
Plone Plone	Version 4.0.7
Plone Plone	Version 4.0.8
Plone Plone	Version 4.0.9
Plone Plone	Version 4.0
Plone Plone	Version 4.1
Plone Plone	Version 4.2
Plone Plone	Version 4.2a1
Plone Plone	Version 4.2a2