CVE-2011-1950

CVE Database · CVE-2011-1950

CVE-2011-1950

· N/AModified

CVSS v3.1

N/A

EPSS

1.58%

Published

Jun 6, 2011

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.

Weaknesses (CWE)

CWE-264

Affected Products (2)

plone · plonevulnerable

References (14)

http://osvdb.org/72729

http://plone.org/products/plone/security/advisories/CVE-2011-1950

PatchVendor Advisory

http://secunia.com/advisories/44775

Vendor Advisory

http://securityreason.com/securityalert/8269

http://www.securityfocus.com/archive/1/518155/100/0/threaded

http://www.securityfocus.com/bid/48005

https://exchange.xforce.ibmcloud.com/vulnerabilities/67695

http://osvdb.org/72729

http://plone.org/products/plone/security/advisories/CVE-2011-1950

PatchVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs