Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-1292
HistoryMar 24, 2008 - 5:44 p.m.

CVE-2008-1292

2008-03-2417:44:00
CWE-200
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.5%

JSON

ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading (1) forbidden pathnames in the revision view, (2) log history that can only be reached by traversing a forbidden object, or (3) forbidden diff view path parameters.

Affected configurations

NVD
Node
gentoolinux
OR
redhatfedoraMatch7
OR
redhatfedoraMatch8
AND
viewvcviewvcMatch1.0.2
OR
viewvcviewvcMatch1.0.3

Related

debiancve 1
prion 1
redhatcve 1
cvelist 1
cve 1
ubuntucve 1
nessus 4
gentoo 1
securityvulns 2
openvas 3
suse 1
debiancve
debiancve
CVE-2008-1292
2008-03-24 17:44:00
prion
prion
Design/Logic Flaw
2008-03-24 17:44:00
redhatcve
redhatcve
CVE-2008-1292
2019-10-04 21:57:44
cvelist
cvelist
CVE-2008-1292
2008-03-24 17:00:00
cve
cve
CVE-2008-1292
2008-03-24 17:44:00
ubuntucve
ubuntucve
CVE-2008-1292
2008-03-24 00:00:00
nessus
nessus
openSUSE Security Update : viewvc (viewvc-48)
2009-07-21 00:00:00
GLSA-200803-29 : ViewVC: Multiple vulnerabilities
2008-03-21 00:00:00
openSUSE 10 Security Update : viewvc (viewvc-5358)
2008-08-01 00:00:00
gentoo
gentoo
ViewVC: Multiple vulnerabilities
2008-03-19 00:00:00
securityvulns
securityvulns
[ GLSA 200803-29 ] ViewVC: Multiple vulnerabilities
2008-03-20 00:00:00
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2008-03-20 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200803-29 (viewvc)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200803-29 (viewvc)
2008-09-24 00:00:00
SuSE Update for net-snmp SUSE-SA:2008:039
2009-01-23 00:00:00
suse
suse
authentication bypass, denial-of-service in net-snmp
2008-08-01 13:33:56

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.5%

JSON
Related for NVD:CVE-2008-1292
debiancve1prion1redhatcve1cvelist1cve1ubuntucve1nessus4gentoo1securityvulns2openvas3suse1