Vulnerability Details : CVE-2001-0128
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.
Exploit prediction scoring system (EPSS) score for CVE-2001-0128
Probability of exploitation activity in the next 30 days: 0.06%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 23 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2001-0128
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
References for CVE-2001-0128
-
http://www.redhat.com/support/errata/RHSA-2000-127.html
-
http://www.debian.org/security/2000/20001219
Patch;Vendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/5777
-
http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-083.php3
Patch
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365
-
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:06.zope.asc
Patch;Vendor Advisory
Products affected by CVE-2001-0128
- cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*
- cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*
- cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:linux_powertools:6.1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:linux_powertools:6.2:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:linux_powertools:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:zope:zope:*:*:*:*:*:*:*:*
- cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*
- cpe:2.3:o:conectiva:linux:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:*