← back
CVE-2013-4196

CVE-2013-4196

EPSS 1.4%
The object manager implementation (objectmanager.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly restrict access to internal methods, which allows remote attackers to obtain sensitive information via a crafted request.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://plone.org/products/plone-hotfix/releases/20130618http://plone.org/products/plone/security/advisories/20130618-announcementhttps://bugzilla.redhat.com/show_bug.cgi?id=978475http://seclists.org/oss-sec/2013/q3/261