VYPR
Get started
← All advisories
High severityNVD Advisory· Published Apr 22, 2002· Updated Apr 16, 2026

CVE-2002-0170

CVE-2002-0170

Description

Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
zopePyPI
>= 2.2.0, < 2.4.42.4.4
zopePyPI
>= 2.5.0, < 2.5.12.5.1

Affected products

17
  • Zope/Zope17 versions
    cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.4.4b1:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:zope:zope:2.5.1b1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

12

News mentions

0

No linked articles in our index yet.