Read the docs
TI-2011-03162 Aliases CVE-2011-3587GHSA-8w48-m6hx-rjw2

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through…

Priority HIGH 80Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and GitHub.

Summary

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p_ class in OFS/misc_.py and the use of Python modules.

Why it matters now

EPSS 0.78079 99th percentileScored 2026-11-07
Fix Fixed zope2 (PyPI): 2.12.20, 2.13.10

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—zope2 (PyPI)2.12.0 to before 2.12.202.12.20Patch availableGHSA-8w48-m6hx-rjw2
—zope2 (PyPI)2.13.0 to before 2.13.102.13.10Patch availableGHSA-8w48-m6hx-rjw2
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • zope2 (PyPI) Vendor— Affected 2.12.0 to before 2.12.20 Fixed in 2.12.20 Patch available GHSA-8w48-m6hx-rjw2
  • zope2 (PyPI) Vendor— Affected 2.13.0 to before 2.13.10 Fixed in 2.13.10 Patch available GHSA-8w48-m6hx-rjw2

CPE configurations NVD · 60

CPEVersionsRoleVendor
cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:*4.0Vulnerableplone
cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:*4.0.1Vulnerableplone
cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:*4.0.2Vulnerableplone
cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:*4.0.3Vulnerableplone
cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:*4.0.4Vulnerableplone
cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:*4.0.5Vulnerableplone
cpe:2.3:a:plone:plone:4.0.6.1:*:*:*:*:*:*:*4.0.6.1Vulnerableplone
cpe:2.3:a:plone:plone:4.0.7:*:*:*:*:*:*:*4.0.7Vulnerableplone
cpe:2.3:a:plone:plone:4.0.8:*:*:*:*:*:*:*4.0.8Vulnerableplone
cpe:2.3:a:plone:plone:4.0.9:*:*:*:*:*:*:*4.0.9Vulnerableplone
  • cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·plone
  • cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·plone
  • cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·plone
  • cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·plone
  • cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Vulnerable ·plone
  • cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:* Versions 4.0.5 Vulnerable ·plone
  • cpe:2.3:a:plone:plone:4.0.6.1:*:*:*:*:*:*:* Versions 4.0.6.1 Vulnerable ·plone
  • cpe:2.3:a:plone:plone:4.0.7:*:*:*:*:*:*:* Versions 4.0.7 Vulnerable ·plone
  • cpe:2.3:a:plone:plone:4.0.8:*:*:*:*:*:*:* Versions 4.0.8 Vulnerable ·plone
  • cpe:2.3:a:plone:plone:4.0.9:*:*:*:*:*:*:* Versions 4.0.9 Vulnerable ·plone
Show 50 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:*4.1Vulnerableplone
cpe:2.3:a:plone:plone:4.2:*:*:*:*:*:*:*4.2Vulnerableplone
cpe:2.3:a:plone:plone:4.2a1:*:*:*:*:*:*:*4.2a1Vulnerableplone
cpe:2.3:a:plone:plone:4.2a2:*:*:*:*:*:*:*4.2a2Vulnerableplone
cpe:2.3:a:zope:zope:2.12.0:*:*:*:*:*:*:*2.12.0Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.0:a1:*:*:*:*:*:*2.12.0 a1Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.0:a2:*:*:*:*:*:*2.12.0 a2Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.0:a3:*:*:*:*:*:*2.12.0 a3Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.0:a4:*:*:*:*:*:*2.12.0 a4Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.0:b1:*:*:*:*:*:*2.12.0 b1Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.0:b2:*:*:*:*:*:*2.12.0 b2Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.0:b3:*:*:*:*:*:*2.12.0 b3Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.0:b4:*:*:*:*:*:*2.12.0 b4Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.1:*:*:*:*:*:*:*2.12.1Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.2:*:*:*:*:*:*:*2.12.2Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.3:*:*:*:*:*:*:*2.12.3Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.4:*:*:*:*:*:*:*2.12.4Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.5:*:*:*:*:*:*:*2.12.5Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.6:*:*:*:*:*:*:*2.12.6Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.7:*:*:*:*:*:*:*2.12.7Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.8:*:*:*:*:*:*:*2.12.8Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.9:*:*:*:*:*:*:*2.12.9Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.10:*:*:*:*:*:*:*2.12.10Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.11:*:*:*:*:*:*:*2.12.11Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.12:*:*:*:*:*:*:*2.12.12Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.13:*:*:*:*:*:*:*2.12.13Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.14:*:*:*:*:*:*:*2.12.14Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.15:*:*:*:*:*:*:*2.12.15Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.16:*:*:*:*:*:*:*2.12.16Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.17:*:*:*:*:*:*:*2.12.17Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.18:*:*:*:*:*:*:*2.12.18Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.19:*:*:*:*:*:*:*2.12.19Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.12.20:*:*:*:*:*:*:*2.12.20Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.0:*:*:*:*:*:*:*2.13.0Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.0:a1:*:*:*:*:*:*2.13.0 a1Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.0:a2:*:*:*:*:*:*2.13.0 a2Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.0:a3:*:*:*:*:*:*2.13.0 a3Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.0:a4:*:*:*:*:*:*2.13.0 a4Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.0:b1:*:*:*:*:*:*2.13.0 b1Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.0:c1:*:*:*:*:*:*2.13.0 c1Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.1:*:*:*:*:*:*:*2.13.1Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.2:*:*:*:*:*:*:*2.13.2Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.3:*:*:*:*:*:*:*2.13.3Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.4:*:*:*:*:*:*:*2.13.4Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.5:*:*:*:*:*:*:*2.13.5Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.6:*:*:*:*:*:*:*2.13.6Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.7:*:*:*:*:*:*:*2.13.7Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.8:*:*:*:*:*:*:*2.13.8Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.9:*:*:*:*:*:*:*2.13.9Vulnerablezopefoundation
cpe:2.3:a:zope:zope:2.13.10:*:*:*:*:*:*:*2.13.10Vulnerablezopefoundation
  • cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·plone
  • cpe:2.3:a:plone:plone:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·plone
  • cpe:2.3:a:plone:plone:4.2a1:*:*:*:*:*:*:* Versions 4.2a1 Vulnerable ·plone
  • cpe:2.3:a:plone:plone:4.2a2:*:*:*:*:*:*:* Versions 4.2a2 Vulnerable ·plone
  • cpe:2.3:a:zope:zope:2.12.0:*:*:*:*:*:*:* Versions 2.12.0 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.0:a1:*:*:*:*:*:* Versions 2.12.0 a1 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.0:a2:*:*:*:*:*:* Versions 2.12.0 a2 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.0:a3:*:*:*:*:*:* Versions 2.12.0 a3 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.0:a4:*:*:*:*:*:* Versions 2.12.0 a4 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.0:b1:*:*:*:*:*:* Versions 2.12.0 b1 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.0:b2:*:*:*:*:*:* Versions 2.12.0 b2 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.0:b3:*:*:*:*:*:* Versions 2.12.0 b3 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.0:b4:*:*:*:*:*:* Versions 2.12.0 b4 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.1:*:*:*:*:*:*:* Versions 2.12.1 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.2:*:*:*:*:*:*:* Versions 2.12.2 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.3:*:*:*:*:*:*:* Versions 2.12.3 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.4:*:*:*:*:*:*:* Versions 2.12.4 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.5:*:*:*:*:*:*:* Versions 2.12.5 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.6:*:*:*:*:*:*:* Versions 2.12.6 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.7:*:*:*:*:*:*:* Versions 2.12.7 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.8:*:*:*:*:*:*:* Versions 2.12.8 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.9:*:*:*:*:*:*:* Versions 2.12.9 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.10:*:*:*:*:*:*:* Versions 2.12.10 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.11:*:*:*:*:*:*:* Versions 2.12.11 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.12:*:*:*:*:*:*:* Versions 2.12.12 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.13:*:*:*:*:*:*:* Versions 2.12.13 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.14:*:*:*:*:*:*:* Versions 2.12.14 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.15:*:*:*:*:*:*:* Versions 2.12.15 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.16:*:*:*:*:*:*:* Versions 2.12.16 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.17:*:*:*:*:*:*:* Versions 2.12.17 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.18:*:*:*:*:*:*:* Versions 2.12.18 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.19:*:*:*:*:*:*:* Versions 2.12.19 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.12.20:*:*:*:*:*:*:* Versions 2.12.20 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.0:*:*:*:*:*:*:* Versions 2.13.0 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.0:a1:*:*:*:*:*:* Versions 2.13.0 a1 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.0:a2:*:*:*:*:*:* Versions 2.13.0 a2 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.0:a3:*:*:*:*:*:* Versions 2.13.0 a3 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.0:a4:*:*:*:*:*:* Versions 2.13.0 a4 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.0:b1:*:*:*:*:*:* Versions 2.13.0 b1 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.0:c1:*:*:*:*:*:* Versions 2.13.0 c1 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.1:*:*:*:*:*:*:* Versions 2.13.1 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.2:*:*:*:*:*:*:* Versions 2.13.2 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.3:*:*:*:*:*:*:* Versions 2.13.3 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.4:*:*:*:*:*:*:* Versions 2.13.4 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.5:*:*:*:*:*:*:* Versions 2.13.5 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.6:*:*:*:*:*:*:* Versions 2.13.6 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.7:*:*:*:*:*:*:* Versions 2.13.7 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.8:*:*:*:*:*:*:* Versions 2.13.8 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.9:*:*:*:*:*:*:* Versions 2.13.9 Vulnerable ·zopefoundation
  • cpe:2.3:a:zope:zope:2.13.10:*:*:*:*:*:*:* Versions 2.13.10 Vulnerable ·zopefoundation

Remediation

  • Fix · GHSA-8w48-m6hx-rjw2 zope2 (PyPI) Fixed in 2.12.20 Advisory →
  • Fix · GHSA-8w48-m6hx-rjw2 zope2 (PyPI) Fixed in 2.13.10 Advisory →

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-3587
  2. 2026-10-03 Alias added: GHSA-8w48-m6hx-rjw2

References

Patch 6

Advisory 1

Other 5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences