CVE-2009-0662: Medium severity Plone PlonePAS vulnerability
The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0662?
CVE-2009-0662 is classified as a medium severity vulnerability due to the potential for exploitation by remote authenticated users.
How do I fix CVE-2009-0662?
To fix CVE-2009-0662, update the PlonePAS product to version 3.2.2 or later, or 3.9 or later.
Who is affected by CVE-2009-0662?
CVE-2009-0662 affects users running PlonePAS versions 3.0 through 3.3 and PlonePAS 3.2 versions before 3.2.2.
What type of vulnerability is CVE-2009-0662?
CVE-2009-0662 is an authentication bypass vulnerability related to user identity acquisition.
Can CVE-2009-0662 be exploited remotely?
Yes, CVE-2009-0662 can be exploited remotely by authenticated users to impersonate other users.