CVE-2012-3356 in ViewVC

Summary

The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended access restrictions via unspecified vectors.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 06/14/2012
• Disclosure: 07/22/2012
• Moderation: VulDB entry created
• Entries: VDB-61376 (1)
• CPE: ready
• CWE: CWE-287 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00436
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-3356
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-3356
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-3356/