CVE-2014-3528 in Subversion信息

摘要

由 MITRE

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2014-05-14

披露

2014-08-19

管理

已接受

条目

VDB-70661

CPE

准备好

CWE

CWE-255 (已确认)

CVSS

4.0 (NVD)

EPSS

0.07495

KEV

否

活动

非常低

部门

Hostingprovider

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2014-3528
NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-3528
CVE Details	https://www.cvedetails.com/cve/CVE-2014-3528/

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!