affected:
- package:
    ecosystem: PyPI
    name: products-plonehotfix20110928
    purl: pkg:pypi/products-plonehotfix20110928
  ranges:
  - events:
    - introduced: '0'
    type: ECOSYSTEM
  versions:
  - '1.0'
  - '1.1'
aliases:
- CVE-2011-4030
details: The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2
  through 4.2a2 does not prevent the KwAsAttributes classes from being publishable,
  which allows remote attackers to access sub-objects via unspecified vectors, a different
  vulnerability than CVE-2011-3587.
id: PYSEC-2011-27
modified: '2024-11-21T14:22:59.206417Z'
published: '2011-10-10T10:55:00Z'
references:
- type: FIX
  url: http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0
- type: FIX
  url: http://plone.org/products/plone-hotfix/releases/20110928
- type: FIX
  url: http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zip
- type: ADVISORY
  url: http://secunia.com/advisories/46323
- type: WEB
  url: http://www.securityfocus.com/bid/50287
withdrawn: '2024-11-22T04:37:05Z'