CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-21336

Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an information disclosure vulnerability - everyone can list the names of roles defined in the ZODB Role Manager plugin if the site uses this plugin. The problem has been fixed in version 2.6.0. Depending on how you have installed Products.PluggableAuthService, you should change the buildout version pin to 2.6.0 and re-run the buildout, or if you used pip simply do `pip install "Products.PluggableAuthService>=2.6.0"`.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 62.6%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.0

References

Products affected by CVE-2021-21336

Plone » Plone » Version: 4.3.0

cpe:2.3:a:plone:plone:4.3.0
Plone » Plone » Version: 4.3.1

cpe:2.3:a:plone:plone:4.3.1
Plone » Plone » Version: 4.3.10

cpe:2.3:a:plone:plone:4.3.10
Plone » Plone » Version: 4.3.11

cpe:2.3:a:plone:plone:4.3.11
Plone » Plone » Version: 4.3.12

cpe:2.3:a:plone:plone:4.3.12
Plone » Plone » Version: 4.3.13

cpe:2.3:a:plone:plone:4.3.13
Plone » Plone » Version: 4.3.14

cpe:2.3:a:plone:plone:4.3.14
Plone » Plone » Version: 4.3.15

cpe:2.3:a:plone:plone:4.3.15
Plone » Plone » Version: 4.3.16

cpe:2.3:a:plone:plone:4.3.16
Plone » Plone » Version: 4.3.17

cpe:2.3:a:plone:plone:4.3.17
Plone » Plone » Version: 4.3.18

cpe:2.3:a:plone:plone:4.3.18
Plone » Plone » Version: 4.3.19

cpe:2.3:a:plone:plone:4.3.19
Plone » Plone » Version: 4.3.2

cpe:2.3:a:plone:plone:4.3.2
Plone » Plone » Version: 4.3.20

cpe:2.3:a:plone:plone:4.3.20
Plone » Plone » Version: 4.3.3

cpe:2.3:a:plone:plone:4.3.3
Plone » Plone » Version: 4.3.4

cpe:2.3:a:plone:plone:4.3.4
Plone » Plone » Version: 4.3.5

cpe:2.3:a:plone:plone:4.3.5
Plone » Plone » Version: 4.3.6

cpe:2.3:a:plone:plone:4.3.6
Plone » Plone » Version: 4.3.7

cpe:2.3:a:plone:plone:4.3.7
Plone » Plone » Version: 4.3.8

cpe:2.3:a:plone:plone:4.3.8
Plone » Plone » Version: 4.3.9

cpe:2.3:a:plone:plone:4.3.9
Plone » Plone » Version: 5.0

cpe:2.3:a:plone:plone:5.0
Plone » Plone » Version: 5.0.1

cpe:2.3:a:plone:plone:5.0.1
Plone » Plone » Version: 5.0.10

cpe:2.3:a:plone:plone:5.0.10
Plone » Plone » Version: 5.0.2

cpe:2.3:a:plone:plone:5.0.2
Plone » Plone » Version: 5.0.3

cpe:2.3:a:plone:plone:5.0.3
Plone » Plone » Version: 5.0.4

cpe:2.3:a:plone:plone:5.0.4
Plone » Plone » Version: 5.0.5

cpe:2.3:a:plone:plone:5.0.5
Plone » Plone » Version: 5.0.6

cpe:2.3:a:plone:plone:5.0.6
Plone » Plone » Version: 5.0.7

cpe:2.3:a:plone:plone:5.0.7
Plone » Plone » Version: 5.0.8

cpe:2.3:a:plone:plone:5.0.8
Plone » Plone » Version: 5.0.9

cpe:2.3:a:plone:plone:5.0.9
Plone » Plone » Version: 5.1

cpe:2.3:a:plone:plone:5.1
Plone » Plone » Version: 5.1.1

cpe:2.3:a:plone:plone:5.1.1
Plone » Plone » Version: 5.1.2

cpe:2.3:a:plone:plone:5.1.2
Plone » Plone » Version: 5.1.3

cpe:2.3:a:plone:plone:5.1.3
Plone » Plone » Version: 5.1.4

cpe:2.3:a:plone:plone:5.1.4
Plone » Plone » Version: 5.1.5

cpe:2.3:a:plone:plone:5.1.5
Plone » Plone » Version: 5.1.6

cpe:2.3:a:plone:plone:5.1.6
Plone » Plone » Version: 5.1.7

cpe:2.3:a:plone:plone:5.1.7
Plone » Plone » Version: 5.1a1

cpe:2.3:a:plone:plone:5.1a1
Plone » Plone » Version: 5.1a2

cpe:2.3:a:plone:plone:5.1a2
Plone » Plone » Version: 5.1b2

cpe:2.3:a:plone:plone:5.1b2
Plone » Plone » Version: 5.1b3

cpe:2.3:a:plone:plone:5.1b3
Plone » Plone » Version: 5.1b4

cpe:2.3:a:plone:plone:5.1b4
Plone » Plone » Version: 5.1rc1

cpe:2.3:a:plone:plone:5.1rc1
Plone » Plone » Version: 5.1rc2

cpe:2.3:a:plone:plone:5.1rc2
Plone » Plone » Version: 5.2

cpe:2.3:a:plone:plone:5.2
Plone » Plone » Version: 5.2.0

cpe:2.3:a:plone:plone:5.2.0
Plone » Plone » Version: 5.2.1

cpe:2.3:a:plone:plone:5.2.1
Plone » Plone » Version: 5.2.2

cpe:2.3:a:plone:plone:5.2.2
Plone » Plone » Version: 5.2.3

cpe:2.3:a:plone:plone:5.2.3
Plone » Plone » Version: 5.2.4

cpe:2.3:a:plone:plone:5.2.4
Zope » Products.pluggableauthservice » Version: N/A

cpe:2.3:a:zope:products.pluggableauthservice:-
Zope » Products.pluggableauthservice » Version: 1.10.0

cpe:2.3:a:zope:products.pluggableauthservice:1.10.0
Zope » Products.pluggableauthservice » Version: 1.11.0

cpe:2.3:a:zope:products.pluggableauthservice:1.11.0
Zope » Products.pluggableauthservice » Version: 1.11.1

cpe:2.3:a:zope:products.pluggableauthservice:1.11.1
Zope » Products.pluggableauthservice » Version: 1.11.2

cpe:2.3:a:zope:products.pluggableauthservice:1.11.2
Zope » Products.pluggableauthservice » Version: 1.11.3

cpe:2.3:a:zope:products.pluggableauthservice:1.11.3
Zope » Products.pluggableauthservice » Version: 1.5.1

cpe:2.3:a:zope:products.pluggableauthservice:1.5.1
Zope » Products.pluggableauthservice » Version: 1.5.2

cpe:2.3:a:zope:products.pluggableauthservice:1.5.2
Zope » Products.pluggableauthservice » Version: 1.5.2.1

cpe:2.3:a:zope:products.pluggableauthservice:1.5.2.1
Zope » Products.pluggableauthservice » Version: 1.5.3

cpe:2.3:a:zope:products.pluggableauthservice:1.5.3
Zope » Products.pluggableauthservice » Version: 1.5.4

cpe:2.3:a:zope:products.pluggableauthservice:1.5.4
Zope » Products.pluggableauthservice » Version: 1.5.5

cpe:2.3:a:zope:products.pluggableauthservice:1.5.5
Zope » Products.pluggableauthservice » Version: 1.6

cpe:2.3:a:zope:products.pluggableauthservice:1.6
Zope » Products.pluggableauthservice » Version: 1.6.1

cpe:2.3:a:zope:products.pluggableauthservice:1.6.1
Zope » Products.pluggableauthservice » Version: 1.6.2

cpe:2.3:a:zope:products.pluggableauthservice:1.6.2
Zope » Products.pluggableauthservice » Version: 1.6.3

cpe:2.3:a:zope:products.pluggableauthservice:1.6.3
Zope » Products.pluggableauthservice » Version: 1.6.4

cpe:2.3:a:zope:products.pluggableauthservice:1.6.4
Zope » Products.pluggableauthservice » Version: 1.6.5

cpe:2.3:a:zope:products.pluggableauthservice:1.6.5
Zope » Products.pluggableauthservice » Version: 1.7.0

cpe:2.3:a:zope:products.pluggableauthservice:1.7.0
Zope » Products.pluggableauthservice » Version: 1.7.1

cpe:2.3:a:zope:products.pluggableauthservice:1.7.1
Zope » Products.pluggableauthservice » Version: 1.7.2

cpe:2.3:a:zope:products.pluggableauthservice:1.7.2
Zope » Products.pluggableauthservice » Version: 1.7.3

cpe:2.3:a:zope:products.pluggableauthservice:1.7.3
Zope » Products.pluggableauthservice » Version: 1.7.4

cpe:2.3:a:zope:products.pluggableauthservice:1.7.4
Zope » Products.pluggableauthservice » Version: 1.7.5

cpe:2.3:a:zope:products.pluggableauthservice:1.7.5
Zope » Products.pluggableauthservice » Version: 1.7.6

cpe:2.3:a:zope:products.pluggableauthservice:1.7.6
Zope » Products.pluggableauthservice » Version: 1.7.7

cpe:2.3:a:zope:products.pluggableauthservice:1.7.7
Zope » Products.pluggableauthservice » Version: 1.7.8

cpe:2.3:a:zope:products.pluggableauthservice:1.7.8
Zope » Products.pluggableauthservice » Version: 1.8.0

cpe:2.3:a:zope:products.pluggableauthservice:1.8.0
Zope » Products.pluggableauthservice » Version: 1.9.0

cpe:2.3:a:zope:products.pluggableauthservice:1.9.0
Zope » Products.pluggableauthservice » Version: 2.0

cpe:2.3:a:zope:products.pluggableauthservice:2.0
Zope » Products.pluggableauthservice » Version: 2.1

cpe:2.3:a:zope:products.pluggableauthservice:2.1
Zope » Products.pluggableauthservice » Version: 2.1.1

cpe:2.3:a:zope:products.pluggableauthservice:2.1.1
Zope » Products.pluggableauthservice » Version: 2.2

cpe:2.3:a:zope:products.pluggableauthservice:2.2
Zope » Products.pluggableauthservice » Version: 2.2.1

cpe:2.3:a:zope:products.pluggableauthservice:2.2.1
Zope » Products.pluggableauthservice » Version: 2.3

cpe:2.3:a:zope:products.pluggableauthservice:2.3
Zope » Products.pluggableauthservice » Version: 2.4

cpe:2.3:a:zope:products.pluggableauthservice:2.4
Zope » Products.pluggableauthservice » Version: 2.5

cpe:2.3:a:zope:products.pluggableauthservice:2.5
Zope » Products.pluggableauthservice » Version: 2.5.1

cpe:2.3:a:zope:products.pluggableauthservice:2.5.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-21336

Products

Pricing

Contact Us