CVE-2018-1000111

CVE-2018-1000111 affects the Jenkins Subversion Plugin (versions 2.10.2 and earlier). The root cause is improper authorization in SubversionStatus.java and SubversionRepositoryStatus.java, enabling an attacker with network access to obtain a list of nodes and users. The vulnerability enables info...

CVE-2018-1000111

An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...

CVE-2018-1000111

An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...

PT-2018-9290

Name of the Vulnerable Software and Affected Versions: Jenkins Subversion Plugin versions 2.10.2 and earlier Description: An improper authorization issue exists that allows an attacker with network access to obtain a list of nodes and users. This is due to a problem in SubversionStatus.java and...

CVE-2018-1000111: Incorrect Authorization

An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...

Disclosure of user names and node names to unauthorized users through post-commit hook URL in Subversion Plugin

The class handling unauthenticated Subversion post-commit hook notification requests at the /subversion/ path unnecessarily extended another type that handled requests to the …/search/ sub-path. This allowed submission of search queries to Jenkins, and getting a list of search results usually...

Debian: Security Advisory (DLA-1052-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libsvn_fs_fs/fs_fs.c Subversion Disclosure DoS

The vulnerability in the libsvnfsfs/fsfs.c component of the Subversion version control system exists due to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to damaged repositories of FSFS FileSystem atop the FileSystem or caus...

Critical Photon OS Security Update - PHSA-2017-0093

Updates of 'libvirt', 'linux', 'subversion', 'ncurses', 'apr', 'linux-esx', 'krb5' packages of Photon OS have been released...

CVE-2017-9758

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."...

CVE-2017-9758

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."...

Session fixation

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."...

CVE-2017-9758: Improper Certificate Validation

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."...

CVE-2017-9758

CVE-2017-9758 affects Savitech USB audio driver packages for Windows. Some driver installers silently install a root CA certificate (SaviAudio) into the Windows Trusted Root Certification Authorities store, creating a trust-anchor that can be abused for man-in-the-middle attacks. Impact reported ...

Apache Subversion DoS Vulnerability (Nov 2017)

Apache Subversion is prone to a denial of service DoS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Medium: golang

Issue Overview: Arbitrary code execution during go get or go get -d: Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points ...

Apache Subversion 'libsvn_fs_fs/fs_fs.c' Denial of Service Vulnerability

Subversion is an open source multi-user version control system that supports non-ASCII text and binary data. A denial-of-service vulnerability exists in the libsvnfsfs/fsfs.c file in version 1.8.x of Apache Subversion prior to 1.8.2, which can be exploited by an authenticated, remote attacker to...

CVE-2013-4246

libsvnfsfs/fsfs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties...

CVE-2013-4246

libsvnfsfs/fsfs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive information by editing packed revision properties...

CVE-2013-4246

CVE-2013-4246 affects Apache Subversion 1.8.x prior to 1.8.2. The vulnerability resides in libsvn_fs_fs/fs_fs.c, which could allow remote authenticated users with commit access to corrupt FSFS repositories and trigger a denial of service or disclose sensitive information by editing packed revisio...