CVE-2002-0170
Zope does not properly verify the access for objects with proxy roles
CVE-2002-0170 is a high vulnerability (CVSS 7.5) in Zope, published April 22, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.58%, the 75th percentile. Fixed in zope 2.4.4.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.58%EPSS, 75th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.4.4zope +2 more
Description
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
- Record
CVE-2002-0170- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
- Record
CVE-2002-0170- Updated
- 2026-11-02
EUVDEUVD-2022-1701No score
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
- Record
EUVD-2022-1701- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c3rp-4cjh-cp38No score
Zope does not properly verify the access for objects with proxy roles
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
- Record
GHSA-c3rp-4cjh-cp38- Weakness
- CWE-284
- Updated
- 2026-11-02
OSVGHSA-c3rp-4cjh-cp38No score
Zope does not properly verify the access for objects with proxy roles
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
- Record
GHSA-c3rp-4cjh-cp38- Weakness
- CWE-284
- Updated
- 2026-11-02
OSVPYSEC-2026-758No score
Zope does not properly verify the access for objects with proxy roles
Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
- Record
PYSEC-2026-758- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
marc.info?l=bugtraq&m=101503023511996&w=2
zope.org/Products/Zope/hotfixes
securityfocus.com/bid/4229
redhat.com/support/errata/RHSA-2002-060.html
iss.net/security_center/static/8334.php
osvdb.org/5350
Show 8 moreShow less
nvd.nist.gov/vuln/detail/CVE-2002-0170
launchpad.net/zope2/+milestone/2.4.4
web.archive.org/web/20021120034302/http://online.securityfocus.com/bid/4229
github.com/advisories/GHSA-c3rp-4cjh-cp38
pypi.org/project/zope