Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-3356
HistoryJul 22, 2012 - 12:00 a.m.

CVE-2012-3356

2012-07-2200:00:00
ubuntu.com
ubuntu.com
8

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

0.007

Percentile

79.9%

The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC
before 1.1.15 does not properly perform authorization, which allows remote
attackers to bypass intended access restrictions via unspecified vectors.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchviewvc< 1.1.5-1.1+squeeze2build0.12.04.1UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

0.007

Percentile

79.9%