Vulnerability CVE-2013-4189 - CERT Civis.Net

Vulnerability Name:

CVE-2013-4189 (CCN-86205)

Assigned:

2013-08-01

Published:

2013-08-01

Updated:

2014-03-12

Summary:

Multiple unspecified vulnerabilities in (1) dataitems.py, (2) get.py, and (3) traverseName.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users with administrator access to a subtree to access nodes above the subtree via unknown vectors.

CVSS v3 Severity:

4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

6.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P)
4.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Gain Privileges

References:

Source: MITRE
Type: CNA
CVE-2013-4189

Source: CCN
Type: Plone Web site
Plone CMS: Open Source Content Management

Source: CONFIRM
Type: Patch
http://plone.org/products/plone-hotfix/releases/20130618

Source: CONFIRM
Type: Vendor Advisory
http://plone.org/products/plone/security/advisories/20130618-announcement

Source: CCN
Type: oss-sec mailing list, Thu, 01 Aug 2013 00:00:29 -0600
Re: CVE Request -- Plone: 20130618 Hotfix (multiple vectors)

Source: MLIST
Type: UNKNOWN
[oss-security] 20130801 Re: CVE Request -- Plone: 20130618 Hotfix (multiple vectors)

Source: CCN
Type: CVE-2013-4189 plone: Privilege escalation due improper authorization
Bug 978450 CVE-2013-4189 plone: Privilege escalation due improper authorization (dataitems.py, get.py, traverseName.py)

Source: CONFIRM
Type: UNKNOWN
https://bugzilla.redhat.com/show_bug.cgi?id=978450

Source: XF
Type: UNKNOWN
plone-cve20134189-privilege-escalation(86205)

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2013-4189

Vulnerable Configuration:

Configuration 1:

cpe:/a:plone:plone:2.1:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:2.1.1:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:2.1.2:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:2.1.3:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:2.1.4:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:2.5:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:2.5.1:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:2.5.2:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:2.5.3:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:2.5.4:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:2.5.5:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.0:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.0.1:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.0.2:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.0.3:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.0.4:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.0.5:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.0.6:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.1:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.1.1:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.1.2:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.1.3:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.1.4:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.1.5.1:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.1.6:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.1.7:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.2:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.2.1:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.2.2:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.2.3:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.3:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.3.1:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.3.2:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.3.3:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.3.4:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:3.3.5:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.0:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.0.1:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.0.2:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.0.3:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.0.4:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.0.5:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.0.6.1:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.1:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:plone:plone:4.2:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.2.1:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.2.2:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.2.3:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.2.4:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.2.5:*:*:*:*:*:*:*

Configuration 3:

cpe:/a:plone:plone:4.3:*:*:*:*:*:*:*

OR cpe:/a:plone:plone:4.3.1:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:plone:plone:4.3.1:*:*:*:*:*:*:*

Denotes that component is vulnerable