CVE-2016-4043

Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates.

CVSS v3 4.9 MEDIUM
CVSS v2.0 3.5 LOW

4.9^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Exploitability : 1.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.openwall.com/lists/oss-security/2016/04/20/3	Mailing List Third Party Advisory
https://plone.org/security/hotfix/20160419/bypass-restricted-python	Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/04/20/3	Mailing List Third Party Advisory
https://plone.org/security/hotfix/20160419/bypass-restricted-python	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:plone:plone:5.0:::::::*
	cpe:2.3:a:plone:plone:5.0:rc1::::::
	cpe:2.3:a:plone:plone:5.0:rc2::::::
	cpe:2.3:a:plone:plone:5.0:rc3::::::
	cpe:2.3:a:plone:plone:5.0.1:::::::*
	cpe:2.3:a:plone:plone:5.0.2:::::::*
	cpe:2.3:a:plone:plone:5.0.3:::::::*
	cpe:2.3:a:plone:plone:5.0.4:::::::*
	cpe:2.3:a:plone:plone:5.1a1:::::::*

History

21 Nov 2024, 02:51

Type	Values Removed	Values Added
References	~~() http://www.openwall.com/lists/oss-security/2016/04/20/3 - Mailing List, Third Party Advisory~~	() http://www.openwall.com/lists/oss-security/2016/04/20/3 - Mailing List, Third Party Advisory
References	~~() https://plone.org/security/hotfix/20160419/bypass-restricted-python - Vendor Advisory~~	() https://plone.org/security/hotfix/20160419/bypass-restricted-python - Vendor Advisory

Information

Published : 2017-02-24 20:59

Updated : 2024-11-21 02:51

NVD link : CVE-2016-4043

Mitre link : CVE-2016-4043

CVE.ORG link : CVE-2016-4043

JSON object : View

Products Affected

plone

plone

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2016-4043", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.2}]}, "published": "2017-02-24T20:59:00.360", "references": [{"url": "http://www.openwall.com/lists/oss-security/2016/04/20/3", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://plone.org/security/hotfix/20160419/bypass-restricted-python", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2016/04/20/3", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://plone.org/security/hotfix/20160419/bypass-restricted-python", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates."}, {"lang": "es", "value": "Chameleon (five.pt) en Plone 5.0rc1 hasta la versi\u00f3n 5.1a1 permite a usuarios remotos autenticados eludir Restricted Python aprovechando permisos para crear y editar plantillas."}], "lastModified": "2024-11-21T02:51:13.513", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:plone:plone:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8C6DFBF-5CC6-49A7-BC83-E8F686815F6A"}, {"criteria": "cpe:2.3:a:plone:plone:5.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8AF9FB6C-134F-4653-8771-1BF46AB39344"}, {"criteria": "cpe:2.3:a:plone:plone:5.0:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E22BA768-96DE-408F-8979-4CC58B50A09C"}, {"criteria": "cpe:2.3:a:plone:plone:5.0:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1672268D-2EFB-4D9E-99D4-AAEFEA659091"}, {"criteria": "cpe:2.3:a:plone:plone:5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9EF74DD4-27BB-4881-B324-B53336EF0648"}, {"criteria": "cpe:2.3:a:plone:plone:5.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C6962EC-8398-4564-9840-AECB3E3D697D"}, {"criteria": "cpe:2.3:a:plone:plone:5.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADE89FE6-DBF6-4CDD-BBA3-B34AEEAE6BA5"}, {"criteria": "cpe:2.3:a:plone:plone:5.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83D341D6-AB11-444F-88FD-22303D1E3F65"}, {"criteria": "cpe:2.3:a:plone:plone:5.1a1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A98F25E9-C852-458A-B6B9-656B81CC0D33"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}