Description
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.
References
- 6284 vdb-entry
- RHSA-2000:127 vendor-advisory
- zope-calculate-roles(5777) vdb-entry
- MDKSA-2000-083 vendor-advisory
- CLA-2000:365 vendor-advisory
- DSA-006-1 vendor-advisory