5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.004 Low
EPSS
Percentile
72.7%
Subversion reports:
CVE-2015-3184:
Subversion’s mod_authz_svn does not properly restrict anonymous access
in some mixed anonymous/authenticated environments when
using Apache httpd 2.4.
CVE-2015-3187:
Subversion servers, both httpd and svnserve, will reveal some
paths that should be hidden by path-based authz.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
FreeBSD | any | noarch | subversion | = 1.8.0 | UNKNOWN |
FreeBSD | any | noarch | subversion | < 1.8.14 | UNKNOWN |