Vulnerability in Zope

CVE-2002-0688

ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.

EPSS: 0.014 (70.2th percentile) — read the EPSS interpretation.

Affected products

Zope — versions 2.4.0, 2.5.1
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)