CVE-2009-0662

Description

The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.

Affected packages (2)

• PyPI/plone>= 3.0, <= 3.1, <= 3.2, <= 3.3, <= 3.4, <= 3.5
• PyPI/products-plonepas>= 3, < 3.9

References (7)

• ADVISORYhttps://github.com/advisories/GHSA-pq3x-96c3-xgjg
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2009-0662
• WEBhttp://osvdb.org/53975
• WEBhttp://plone.org/products/plone/security/advisories/cve-2009-0662
• WEBhttp://secunia.com/advisories/34840
• WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/50061
• WEBhttp://www.securityfocus.com/bid/34664