CVE-2002-0170: High severity Zope Zope vulnerability
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0170?
CVE-2002-0170 is considered a high severity vulnerability due to the potential for unauthorized access to sensitive documents.
How do I fix CVE-2002-0170?
To fix CVE-2002-0170, you should upgrade Zope to version 2.5.2 or later, which includes the necessary patches.
What versions of Zope are affected by CVE-2002-0170?
CVE-2002-0170 affects Zope versions 2.2.0 through 2.5.1.
What are the consequences of not addressing CVE-2002-0170?
Failing to address CVE-2002-0170 could lead to unauthorized users gaining access to restricted documents and potentially sensitive information.
Is there a workaround for CVE-2002-0170?
While upgrading is the recommended course of action, temporarily restricting user access until the software is updated can act as a mitigative measure.