CVE-2001-0128
published 2001-03-12CVE-2001-0128: Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.
PriorityP419high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.42%
34.2th percentile
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| conectiva | linux | — | — |
| debian | debian_linux | — | — |
| freebsd | freebsd | — | — |
| mandrakesoft | mandrake_linux | — | — |
| mandrakesoft | mandrake_linux | — | — |
| redhat | linux | — | — |
| redhat | linux | — | — |
| redhat | linux | — | — |
| redhat | linux_powertools | — | — |
| redhat | linux_powertools | — | — |
| redhat | linux_powertools | — | — |
| zope | zope | <= 2.2.4 | — |
CVSS provenance
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat7.2HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wqxw-f744-5fh2: Zope before 2
ghsa_unreviewed·2022-05-03
CVE-2001-0128 [HIGH] GHSA-wqxw-f744-5fh2: Zope before 2
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.
Red Hat
security flaw
vendor_redhat·2000-12-16·CVSS 7.2
CVE-2001-0128 [HIGH] security flaw
security flaw
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.
No detection rules found.
No public exploits indexed.
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:06.zope.aschttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365http://www.debian.org/security/2000/20001219http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-083.php3http://www.osvdb.org/6284http://www.redhat.com/support/errata/RHSA-2000-127.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5777ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:06.zope.aschttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365http://www.debian.org/security/2000/20001219http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-083.php3http://www.osvdb.org/6284http://www.redhat.com/support/errata/RHSA-2000-127.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/5777
2001-03-12
Published