CVE-2009-0662

CVE-2009-0662 describes an authentication bypass vulnerability in PlonePAS versions 3.x before 3.9 and 3.2.x before 3.2.2, a product for the Plone content management system. This flaw allows remote authenticated users to impersonate arbitrary users due to improper handling of the login form. With a CVSS score of 6.0, this vulnerability has a medium severity, requiring authenticated access but with moderate attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting low current threat activity.