CVE-2001-0568 Privilege escalation in n/a
A local attacker with scripting capabilities can alter ZClasses attributes, leading to privilege escalation and data modification in Zope.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2001-0568?
CVE-2001-0568 is a low-severity vulnerability in n/a, published on 27 Jul 2001. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilities to alter ZClasses class attributes.
Which versions are affected by CVE-2001-0568?
It affects 1 product.
Products include Zope Zope.
How do I fix CVE-2001-0568?
No fix has been published for CVE-2001-0568 yet. Limit exposure of the affected software until one is available.
Is CVE-2001-0568 being exploited?
There is no known exploitation of CVE-2001-0568 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2000-0062 Zope DTML implementation Improper Authentication
- CVE-2021-32674 Remote Code Execution via traversal in TAL expressions
- CVE-2000-1211 Zope does not properly perform security registration for legacy names
- CVE-2002-0170 Zope does not properly verify the access for objects with proxy roles
- CVE-2002-0688 ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions
Sources
Also known as GHSA-f6r9-3w39-f287.