Red Hat Luci vulnerabilities

2 CVEs affecting Red Hat Luci, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-0720, published 2011-02-03.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-0720, published 2011-02-03. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and…
• CVE-2010-3852, published 2010-11-06. Medium severity, CVSS 6.4. EPSS: 2% chance of exploitation in the next 30 days. The default configuration of Luci 0.22.4 and earlier in Red Hat Conga uses "[INSERT SECRET HERE]" as its secret key for cookies, which makes it easier for remote attackers to bypass repoze.who…