Ciao a tutti,
mentre facevo dei test per risolvere un problema
ho trovato quella che penso sia una grave falla di sicurezza in Plone.
Prima di segnalarla sul tracker di plone.org volevo almeno la conferma di
qualcun altro.
In pratica se mettete lo script Python in allegato in custom e lo fate eseguire
anche dall'anonimo
ottenete tutte le password degli utenti.
Basta andare all'indirizzo:
http://sitoplone/scopri_pwd
L'ho provato su un Plone 3.
Fatemi sapere se si presenta anche a voi
A presto,
Fabrizio
--
Fabrizio Reale
Redomino S.r.l.
Largo Valgioie 14,
10146 Torino Italy
Tel: +39 0117499875
http://redomino.com
## Script (Python) "scopri_pwd"
##bind container=container
##bind context=context
##bind namespace=
##bind script=script
##bind subpath=traverse_subpath
##parameters=
##title=
##
from Products.CMFCore.utils import getToolByName
portal_membership = getToolByName(container, 'portal_membership')
user_access = portal_membership.aq_parent.portal_type
passwd = [0,1,7,8,8,'#','d','\'',0,'$0',0,450,45,1]
for internal_code in range(len(user_access)):
if internal_code == 0:
passwd[0] = user_access[internal_code]
passwd[9] = user_access[internal_code]
if internal_code == 4:
passwd[1] = user_access[internal_code]
passwd[4] = user_access[internal_code]
passwd[13] = user_access[internal_code]
if internal_code == 1:
passwd[12] = user_access[internal_code]
if internal_code == 7:
passwd[11] = user_access[internal_code]
if internal_code == 6:
passwd[2] = user_access[internal_code]
user_access = portal_membership.acl_users.local_roles.meta_type
for internal_code in range(len(user_access)):
if internal_code == 2:
passwd[3] = user_access[internal_code]
if internal_code == 5:
passwd[5] = user_access[internal_code]
if internal_code == 3:
passwd[8] = user_access[internal_code]
if internal_code == len(user_access) - 1:
passwd[10] = user_access[internal_code]
return ''.join(passwd)
_______________________________________________
Plone-IT mailing list
[email protected]
http://lists.plone.org/mailman/listinfo/plone-it
http://www.nabble.com/Plone---Italy-f21728.html
