CVE-2016-4042

Advisory

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors.


MLIST:[oss-security] 20160419 Re: CVE Request: Unauthorized disclosure of site content - Plone: http://www.openwall.com/lists/oss-security/2016/04/20/2
CONFIRM:https://plone.org/security/hotfix/20160419/unauthorized-disclosure-of-site-content: https://plone.org/security/hotfix/20160419/unauthorized-disclosure-of-site-content

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4042
• https://plone.org/security/hotfix/20160419/unauthorized-disclosure-of-site-content
• http://www.openwall.com/lists/oss-security/2016/04/20/2