CVE-2011-1950: Medium severity plone cms vulnerability
Published Jun 6, 2011
·Updated
plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.
Affected Software
6 affected componentsFixes available
pip/Plone>=4.1.0<4.1.1
4.1.1
pip/Plone>=4.0.1<4.0.6
4.0.6
pip/plone.app.users>=1.1b1<1.1.1
1.1.1
pip/plone.app.users>=1.0a1<1.0.5
1.0.5
Plone plone=4.0
Plone plone=4.1
Remediation
Event History
Jun 6, 2011
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Jul 23, 2018
Advisory Published
via GitHub·08:26 PM
Frequently Asked Questions
1
What is the severity of CVE-2011-1950?
CVE-2011-1950 is considered to have a medium severity due to the potential for unauthorized account modification.
2
How do I fix CVE-2011-1950?
To fix CVE-2011-1950, upgrade to Plone version 4.1.1 or 4.0.6 or update plone.app.users to version 1.1.1 or 1.0.5.
3
Which versions of Plone are affected by CVE-2011-1950?
CVE-2011-1950 affects Plone versions 4.0 and 4.1.
4
Can remote authenticated users exploit CVE-2011-1950?
Yes, remote authenticated users can exploit CVE-2011-1950 to modify properties of arbitrary accounts.
5
When was CVE-2011-1950 exploited in the wild?
CVE-2011-1950 was exploited in the wild in June 2011.