Skip to content
OpenAdvisories
Critical RHSA-2011:0394 1 CVE

Red Hat Security Advisory: conga security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Rhel Cluster 5 rhel_cluster:5 conga 0:0.12.2-24.el5_6.1
Red Hat · Rhel Cluster 5 rhel_cluster:5 conga-debuginfo 0:0.12.2-24.el5_6.1
Red Hat · Rhel Cluster 5 rhel_cluster:5 luci 0:0.12.2-24.el5_6.1
Red Hat · Rhel Cluster 5 rhel_cluster:5 ricci 0:0.12.2-24.el5_6.1

Vulnerabilities 1

  • Critical 9.1
    CVE-2011-0720

    Plone Privilege Escalation Vulnerability

    Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.

    plone PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=676961
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0394.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-0720
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0720
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0720