CWE Code: 399
Vulnerability Type: privilege_escalation
CVSS Score: 4.3
CWE Name:  Resource Management Errors
Summary: traverser.py in plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to "retrieving information for certain resources."
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/NONE/PARTIAL
Published Date: 2014-03-11
Last Modified Date: 2014-03-12