CVE-2011-1950

Severity: medium (CVSS 5.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-06-06 · updated 2026-06-16
Weakness: CWE-264

Description

plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.

Affected products

Plone CMS: 4.0, 4.1

References

http://osvdb.org/72729
http://plone.org/products/plone/security/advisories/CVE-2011-1950
http://secunia.com/advisories/44775
http://securityreason.com/securityalert/8269
http://www.securityfocus.com/archive/1/518155/100/0/threaded
http://www.securityfocus.com/bid/48005
https://exchange.xforce.ibmcloud.com/vulnerabilities/67695
http://osvdb.org/72729
http://plone.org/products/plone/security/advisories/CVE-2011-1950
http://secunia.com/advisories/44775
http://securityreason.com/securityalert/8269
http://www.securityfocus.com/archive/1/518155/100/0/threaded

Get alerted when CVE-2011-1950 or the next vulnerability affects your stack