Security Advisory
CVE-2013-7061
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.