Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

plone: unauthorized access

Package(s):

plone

CVE #(s):

CVE-2006-1711

Created:

April 12, 2006

Updated:

April 12, 2006

Description:

From the Debian advisory: "It was discovered that the Plone content management system lacks security declarations for three internal classes. This allows manipulation of user portraits by unprivileged users."

Alerts:

Debian

DSA-1032-1

2006-04-12

(Log in to post comments)