CVE-2011-2528

Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly serious vulnerability." NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-0720.

• http://plone.org/products/plone-hotfix/releases/20110622Patch, Vendor Advisory
• http://plone.org/products/plone/security/advisories/20110622Patch, Vendor Advisory
• http://secunia.com/advisories/45056Vendor Advisory
• http://secunia.com/advisories/45111Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/07/04/6Patch
• http://www.openwall.com/lists/oss-security/2011/07/12/9Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=718824Patch
• https://mail.zope.org/pipermail/zope-announce/2011-June/002260.htmlPatch
• http://plone.org/products/plone-hotfix/releases/20110622Patch, Vendor Advisory
• http://plone.org/products/plone/security/advisories/20110622Patch, Vendor Advisory
• http://secunia.com/advisories/45056Vendor Advisory
• http://secunia.com/advisories/45111Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/07/04/6Patch
• http://www.openwall.com/lists/oss-security/2011/07/12/9Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=718824Patch
• https://mail.zope.org/pipermail/zope-announce/2011-June/002260.htmlPatch

Published

Jul 19, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2522Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2011-2523vsftpd 2.3.4 downloaded between 20110630 and 20110703 contai…9.8
• CVE-2011-2524Directory traversal vulnerability in soup-uri.c in SoupServe…
• CVE-2011-2525The qdisc_notify function in net/sched/sch_api.c in the Linu…7.8
• CVE-2011-2526Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.…
• CVE-2011-2527The change_process_uid function in os-posix.c in Qemu 0.14.0…
• CVE-2011-2529chan_sip.c in the SIP channel driver in Asterisk Open Source…
• CVE-2011-2530Buffer overflow in RSEds.dll in RSHWare.exe in the EDS Hardw…
• CVE-2011-2531Prosody 0.8.x before 0.8.1, when MySQL is used, assigns an i…
• CVE-2011-2532The json.decode function in util/json.lua in Prosody 0.8.x b…
• CVE-2011-2533The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28…
• CVE-2011-2534Buffer overflow in the clusterip_proc_write function in net/…7.8