// For flags

CVE-2011-3587

Plone and Zope - Remote Command Execution

Severity Score

9.3
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

Vulnerabilidad no especificada en Zope v2.12.x y v2.13.x, tal como se usa en Plone v4.0.x hasta v4.0.9., v4.1, y v4.2 hasta v4.2a2, permite a atacantes remotos ejecutar comandos de su elección a través de vectores relacionados con el p_ class en OFS/misc_.py y el uso de módulos Python.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2011-09-21 CVE Reserved
  • 2011-10-10 CVE Published
  • 2011-12-21 First Exploit
  • 2024-08-06 CVE Updated
  • 2024-09-07 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.0
Search vendor "Plone" for product "Plone" and version "4.0"
-
Affected
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.0.1
Search vendor "Plone" for product "Plone" and version "4.0.1"
-
Affected
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.0.2
Search vendor "Plone" for product "Plone" and version "4.0.2"
-
Affected
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.0.3
Search vendor "Plone" for product "Plone" and version "4.0.3"
-
Affected
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.0.4
Search vendor "Plone" for product "Plone" and version "4.0.4"
-
Affected
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.0.5
Search vendor "Plone" for product "Plone" and version "4.0.5"
-
Affected
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.0.6.1
Search vendor "Plone" for product "Plone" and version "4.0.6.1"
-
Affected
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.0.7
Search vendor "Plone" for product "Plone" and version "4.0.7"
-
Affected
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.0.8
Search vendor "Plone" for product "Plone" and version "4.0.8"
-
Affected
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.0.9
Search vendor "Plone" for product "Plone" and version "4.0.9"
-
Affected
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.1
Search vendor "Plone" for product "Plone" and version "4.1"
-
Affected
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.2
Search vendor "Plone" for product "Plone" and version "4.2"
-
Affected
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.2a1
Search vendor "Plone" for product "Plone" and version "4.2a1"
-
Affected
Plone
Search vendor "Plone"
Plone
Search vendor "Plone" for product "Plone"
4.2a2
Search vendor "Plone" for product "Plone" and version "4.2a2"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.0
Search vendor "Zope" for product "Zope" and version "2.12.0"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.0
Search vendor "Zope" for product "Zope" and version "2.12.0"
a1
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.0
Search vendor "Zope" for product "Zope" and version "2.12.0"
a2
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.0
Search vendor "Zope" for product "Zope" and version "2.12.0"
a3
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.0
Search vendor "Zope" for product "Zope" and version "2.12.0"
a4
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.0
Search vendor "Zope" for product "Zope" and version "2.12.0"
b1
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.0
Search vendor "Zope" for product "Zope" and version "2.12.0"
b2
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.0
Search vendor "Zope" for product "Zope" and version "2.12.0"
b3
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.0
Search vendor "Zope" for product "Zope" and version "2.12.0"
b4
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.1
Search vendor "Zope" for product "Zope" and version "2.12.1"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.2
Search vendor "Zope" for product "Zope" and version "2.12.2"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.3
Search vendor "Zope" for product "Zope" and version "2.12.3"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.4
Search vendor "Zope" for product "Zope" and version "2.12.4"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.5
Search vendor "Zope" for product "Zope" and version "2.12.5"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.6
Search vendor "Zope" for product "Zope" and version "2.12.6"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.7
Search vendor "Zope" for product "Zope" and version "2.12.7"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.8
Search vendor "Zope" for product "Zope" and version "2.12.8"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.9
Search vendor "Zope" for product "Zope" and version "2.12.9"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.10
Search vendor "Zope" for product "Zope" and version "2.12.10"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.11
Search vendor "Zope" for product "Zope" and version "2.12.11"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.12
Search vendor "Zope" for product "Zope" and version "2.12.12"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.13
Search vendor "Zope" for product "Zope" and version "2.12.13"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.14
Search vendor "Zope" for product "Zope" and version "2.12.14"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.15
Search vendor "Zope" for product "Zope" and version "2.12.15"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.16
Search vendor "Zope" for product "Zope" and version "2.12.16"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.17
Search vendor "Zope" for product "Zope" and version "2.12.17"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.18
Search vendor "Zope" for product "Zope" and version "2.12.18"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.19
Search vendor "Zope" for product "Zope" and version "2.12.19"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.12.20
Search vendor "Zope" for product "Zope" and version "2.12.20"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.0
Search vendor "Zope" for product "Zope" and version "2.13.0"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.0
Search vendor "Zope" for product "Zope" and version "2.13.0"
a1
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.0
Search vendor "Zope" for product "Zope" and version "2.13.0"
a2
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.0
Search vendor "Zope" for product "Zope" and version "2.13.0"
a3
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.0
Search vendor "Zope" for product "Zope" and version "2.13.0"
a4
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.0
Search vendor "Zope" for product "Zope" and version "2.13.0"
b1
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.0
Search vendor "Zope" for product "Zope" and version "2.13.0"
c1
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.1
Search vendor "Zope" for product "Zope" and version "2.13.1"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.2
Search vendor "Zope" for product "Zope" and version "2.13.2"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.3
Search vendor "Zope" for product "Zope" and version "2.13.3"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.4
Search vendor "Zope" for product "Zope" and version "2.13.4"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.5
Search vendor "Zope" for product "Zope" and version "2.13.5"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.6
Search vendor "Zope" for product "Zope" and version "2.13.6"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.7
Search vendor "Zope" for product "Zope" and version "2.13.7"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.8
Search vendor "Zope" for product "Zope" and version "2.13.8"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.9
Search vendor "Zope" for product "Zope" and version "2.13.9"
-
Affected
Zope
Search vendor "Zope"
Zope
Search vendor "Zope" for product "Zope"
2.13.10
Search vendor "Zope" for product "Zope" and version "2.13.10"
-
Affected