Staging Environment: Content and features may be unstable or change without notice.
Advisory details: pypa / zope/PYSEC-2026-758
Advisory ID pypa/zope/PYSEC-2026-758
Aliases CVE-2002-0170
GHSA-c3rp-4cjh-cp38
PYSEC-2026-758
Summary Zope does not properly verify the access for objects with proxy roles Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
There are no known severity scores.
Reference id Reference type URL
http://marc.info/?l=bugtraq&m=101503023511996&w=2
https://github.com/zopefoundation/Zope
https://launchpad.net/zope2/+milestone/2.4.4
https://launchpad.net/zope2/+milestone/2.5.1
https://pypi.org/project/zope
https://web.archive.org/web/20021120034302/http://online.securityfocus.com/bid/4229
https://web.archive.org/web/20070914020022/http://xforce.iss.net/xforce/xfdb/8334
http://www.redhat.com/support/errata/RHSA-2002-060.html
CVE-2002-0170 https://nvd.nist.gov/vuln/detail/CVE-2002-0170
GHSA-c3rp-4cjh-cp38 https://github.com/advisories/GHSA-c3rp-4cjh-cp38
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.