VULNERABILITY INTELLIGENCE

CVE-2009-0662

CVSS score6 MEDIUM
EPSS probability0.97%
CISA KEVNot currently listed
Published2009-04-23
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:P/I:P/A:P

Description

The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.

Weakness classification

  • CWE-287: Improper Authentication

Primary references