Description (CNA)
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://marc.info/?l=bugtraq&m=101503023511996&w=2
- http://www.zope.org/Products/Zope/hotfixes/
- http://www.securityfocus.com/bid/4229
- http://www.redhat.com/support/errata/RHSA-2002-060.html
- http://www.iss.net/security_center/static/8334.php
- http://www.osvdb.org/5350
ADP enrichment
No English description supplied.