CVE-2015-7317 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2015-7317

Deferred

More Info Official Page

Source-cve@mitre.org

Published At-25 Sep, 2017 | 17:29

Updated At-20 Apr, 2025 | 01:37

Kupu 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, and 4.2.0 through 4.2.7 allows remote authenticated users to edit Kupu settings.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	6.8	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Primary	2.0	4.9	MEDIUM	AV:N/AC:M/Au:S/C:P/I:P/A:N

CPE Matches

kupu_project>>kupu>>Versions up to 1.4.16(inclusive)

cpe:2.3:a:kupu_project:kupu:*:*:*:*:*:*:*:*

Plone Foundation

>>plone>>3.3

cpe:2.3:a:plone:plone:3.3:*:*:*:*:*:*:*

Plone Foundation

>>plone>>3.3.1

cpe:2.3:a:plone:plone:3.3.1:*:*:*:*:*:*:*

Plone Foundation

>>plone>>3.3.2

cpe:2.3:a:plone:plone:3.3.2:*:*:*:*:*:*:*

Plone Foundation

>>plone>>3.3.3

cpe:2.3:a:plone:plone:3.3.3:*:*:*:*:*:*:*

Plone Foundation

>>plone>>3.3.4

cpe:2.3:a:plone:plone:3.3.4:*:*:*:*:*:*:*

Plone Foundation

>>plone>>3.3.5

cpe:2.3:a:plone:plone:3.3.5:*:*:*:*:*:*:*

Plone Foundation

>>plone>>3.3.6

cpe:2.3:a:plone:plone:3.3.6:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.0

cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.0.1

cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.0.2

cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.0.3

cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.0.4

cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.0.5

cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.0.6.1

cpe:2.3:a:plone:plone:4.0.6.1:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.0.7

cpe:2.3:a:plone:plone:4.0.7:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.0.8

cpe:2.3:a:plone:plone:4.0.8:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.0.9

cpe:2.3:a:plone:plone:4.0.9:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.0.10

cpe:2.3:a:plone:plone:4.0.10:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.1

cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.1.1

cpe:2.3:a:plone:plone:4.1.1:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.1.2

cpe:2.3:a:plone:plone:4.1.2:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.1.3

cpe:2.3:a:plone:plone:4.1.3:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.1.4

cpe:2.3:a:plone:plone:4.1.4:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.1.5

cpe:2.3:a:plone:plone:4.1.5:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.1.6

cpe:2.3:a:plone:plone:4.1.6:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.2

cpe:2.3:a:plone:plone:4.2:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.2.1

cpe:2.3:a:plone:plone:4.2.1:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.2.2

cpe:2.3:a:plone:plone:4.2.2:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.2.3

cpe:2.3:a:plone:plone:4.2.3:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.2.4

cpe:2.3:a:plone:plone:4.2.4:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.2.5

cpe:2.3:a:plone:plone:4.2.5:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.2.6

cpe:2.3:a:plone:plone:4.2.6:*:*:*:*:*:*:*

Plone Foundation

>>plone>>4.2.7

cpe:2.3:a:plone:plone:4.2.7:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.openwall.com/lists/oss-security/2015/09/22/15	cve@mitre.org	Mailing List Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1264799	cve@mitre.org	Issue Tracking Third Party Advisory
https://plone.org/security/hotfix/20150910	cve@mitre.org	Vendor Advisory
https://plone.org/security/hotfix/20150910/privilege-escalation-in-kupu	cve@mitre.org	Vendor Advisory
http://www.openwall.com/lists/oss-security/2015/09/22/15	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1264799	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Third Party Advisory
https://plone.org/security/hotfix/20150910	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://plone.org/security/hotfix/20150910/privilege-escalation-in-kupu	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory