[Zope-PTK] Security Bug in version 0.8.2-complete

Hendrik Naumann hn75@gmx.de
Wed, 6 Sep 2000 13:12:34 +0200


Hi 

I installed Zope-PTK from the file 
http://www.zope.org/Products/PTK/ZopePTK-0.8.2-complete.tar.gz
on an Zope-2.2.0-linux2-x86 (SuSE 6.4) - System.

I created some Members and realized that those (on a restarted 
Browser) are able to access the portal-configuration and even change 
settings there.

If you need more infomations, please contact me.

Hendrik Naumann