CVE-2006-4249 | Vulnerability Database | Aqua Security

Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to masquerade as a group.

Affected Software

Name	Vendor	Start Version	End Version
Plone	Plone	2.5 (including)	2.5 (including)
Plone	Plone	2.5.1 (including)	2.5.1 (including)
Zope-cmfplone	Ubuntu	dapper	*
Zope-cmfplone	Ubuntu	edgy	*
Zope-cmfplone	Ubuntu	feisty	*
Zope-cmfplone	Ubuntu	gutsy	*
Zope-cmfplone	Ubuntu	hardy	*
Zope-cmfplone	Ubuntu	intrepid	*

References

http://plone.org/about/security/advisories/cve-2006-4249/
http://secunia.com/advisories/23240
http://www.securityfocus.com/bid/21460
http://www.vupen.com/english/advisories/2006/4878
https://exchange.xforce.ibmcloud.com/vulnerabilities/30762
http://plone.org/about/security/advisories/cve-2006-4249/
http://secunia.com/advisories/23240
http://www.securityfocus.com/bid/21460
http://www.vupen.com/english/advisories/2006/4878
https://exchange.xforce.ibmcloud.com/vulnerabilities/30762

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-4249
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html