CVE-2012-3356 in ViewVC

Riassunto

di MITRE

The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended access restrictions via unspecified vectors.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 14/06/2012
• Divulgazione: 22/07/2012
• Moderazione: accettato
• Voce: VDB-61376
• CPE: pronto
• CWE: CWE-287 (confermato)
• CVSS: 5.0 (NVD)
• EPSS: 0.02025
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-3356
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-3356
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-3356/