Lucene search

K
freebsdFreeBSD57BB5E3D-3C4F-11E5-A4D4-001E8C75030D
HistoryJul 27, 2015 - 12:00 a.m.

subversion -- multiple vulnerabilities

2015-07-2700:00:00
vuxml.freebsd.org
12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.7%

Subversion reports:

CVE-2015-3184:
Subversion’s mod_authz_svn does not properly restrict anonymous access
in some mixed anonymous/authenticated environments when
using Apache httpd 2.4.
CVE-2015-3187:
Subversion servers, both httpd and svnserve, will reveal some
paths that should be hidden by path-based authz.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchsubversion= 1.8.0UNKNOWN
FreeBSDanynoarchsubversion< 1.8.14UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.7%