668
VMScore

CVE-2016-4041

Published: 24/02/2017 Updated: 27/02/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 7.3 | Impact Score: 3.4 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Plone 4.0 up to and including 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote malicious users to gain webdav access via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

plone plone 5.0

plone plone 5.0.4

plone plone 4.3.9

plone plone 4.3.7

plone plone 4.3

plone plone 4.2.6

plone plone 4.2.1

plone plone 4.1.6

plone plone 4.1.4

plone plone 4.0.10

plone plone 4.0.8

plone plone 4.0

plone plone 5.0.3

plone plone 5.0.2

plone plone 5.0.1

plone plone 4.2.5

plone plone 4.2.4

plone plone 4.2.3

plone plone 4.2.2

plone plone 4.0.5

plone plone 4.0.4

plone plone 4.0.3

plone plone 4.0.2

plone plone 4.3.5

plone plone 4.3.4

plone plone 4.3.3

plone plone 4.3.2

plone plone 4.1.3

plone plone 4.1.2

plone plone 4.1.1

plone plone 4.1

plone plone 4.3.8

plone plone 4.3.6

plone plone 4.3.1

plone plone 4.2.7

plone plone 4.2

plone plone 4.1.5

plone plone 4.0.9

plone plone 4.0.7

plone plone 4.0.1