CVE-2012-5492: Infoleak

Q: What is the severity of CVE-2012-5492?

CVE-2012-5492 has a medium severity rating, indicating it can pose a moderate risk to affected systems.

Q: How do I fix CVE-2012-5492?

To mitigate CVE-2012-5492, it is recommended to upgrade Plone to version 4.2.3 or later, or to apply relevant patches.

Q: What versions are affected by CVE-2012-5492?

CVE-2012-5492 affects Plone versions prior to 4.2.3 and versions of 4.3 before beta 1.

Q: What type of attacks does CVE-2012-5492 expose systems to?

CVE-2012-5492 allows remote attackers to obtain metadata about hidden objects through crafted URLs.

Q: Is there an exploit available for CVE-2012-5492?

While no specific exploits have been publicly disclosed for CVE-2012-5492, its vulnerability can potentially be exploited by attackers.

Published Sep 30, 2014

Updated

uidcatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obtain metadata about hidden objects via a crafted URL.

Other sources

uidcatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obtain metadata about hidden objects via a crafted URL.

Affected Software

74 affected componentsFixes available

pip/Plone>=4.3a0<4.3b1

4.3b1

pip/plone<4.2.3

4.2.3

Plone plone<=4.2.2

Plone plone=1.0

Plone plone=1.0.1

Plone plone=1.0.2

Plone plone=1.0.3

Plone plone=1.0.4

Plone plone=1.0.5

Plone plone=1.0.6

Plone plone=2.0

Plone plone=2.0.1

Plone plone=2.0.2

Plone plone=2.0.3

Plone plone=2.0.4

Plone plone=2.0.5

Plone plone=2.1

Plone plone=2.1.1

Plone plone=2.1.2

Plone plone=2.1.3

Plone plone=2.1.4

Plone plone=2.5

Plone plone=2.5.1

Plone plone=2.5.2

Plone plone=2.5.3

Plone plone=2.5.4

Plone plone=2.5.5

Plone plone=3.0

Plone plone=3.0.1

Plone plone=3.0.2

Plone plone=3.0.3

Plone plone=3.0.4

Plone plone=3.0.5

Plone plone=3.0.6

Plone plone=3.1

Plone plone=3.1.1

Plone plone=3.1.2

Plone plone=3.1.3

Plone plone=3.1.4

Plone plone=3.1.5.1

Plone plone=3.1.6

Plone plone=3.1.7

Plone plone=3.2

Plone plone=3.2.1

Plone plone=3.2.2

Plone plone=3.2.3

Plone plone=3.3

Plone plone=3.3.1

Plone plone=3.3.2

Plone plone=3.3.3

Plone plone=3.3.4

Plone plone=3.3.5

Plone plone=4.0

Plone plone=4.0.1

Plone plone=4.0.2

Plone plone=4.0.3

Plone plone=4.0.4

Plone plone=4.0.5

Plone plone=4.0.6.1

Plone plone=4.1

Plone plone=4.1.4

Plone plone=4.1.5

Plone plone=4.1.6

Plone plone=4.2

Plone plone=4.2-a1

Plone plone=4.2-a2

Plone plone=4.2-b1

Plone plone=4.2-b2

Plone plone=4.2-rc1

Plone plone=4.2-rc2

Plone plone=4.2.0.1

Plone plone=4.2.1

Plone plone=4.2.1.1

Plone plone=4.3

Remediation

Patch Available

https://plone.org/products/plone-hotfix/releases/20121106

Event History

Sep 30, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

May 17, 2022

Advisory Published

04:32 AM

Frequently Asked Questions

What is the severity of CVE-2012-5492?