CVE-2002-0688: ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions
(updated )
ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.
References
- github.com/advisories/GHSA-7944-h5rw-qmjx
- nvd.nist.gov/vuln/detail/CVE-2002-0688
- web.archive.org/web/20020810160608/http://www.zope.org/Products/Zope/Hotfix_2002-06-14/security_alert
- web.archive.org/web/20020822025750/http://www.iss.net/security_center/static/9610.php
- web.archive.org/web/20021206023914/http://rhn.redhat.com/errata/RHSA-2002-060.html
- web.archive.org/web/20021223212650/http://online.securityfocus.com/bid/5812
- web.archive.org/web/20070430090648/http://www.debian.org/security/2004/dsa-490
Code Behaviors & Features
Detect and mitigate CVE-2002-0688 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →