CVE-2012-3356

The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
VendorProductVersion
viewvcviewvc
𝑥
≤ 1.1.14
viewvcviewvc
0.8
viewvcviewvc
0.9
viewvcviewvc
0.9.1
viewvcviewvc
0.9.2
viewvcviewvc
0.9.3
viewvcviewvc
0.9.4
viewvcviewvc
1.0.0
viewvcviewvc
1.0.1
viewvcviewvc
1.0.2
viewvcviewvc
1.0.3
viewvcviewvc
1.0.4
viewvcviewvc
1.0.5
viewvcviewvc
1.0.6
viewvcviewvc
1.0.7
viewvcviewvc
1.0.8
viewvcviewvc
1.0.9
viewvcviewvc
1.0.10
viewvcviewvc
1.0.11
viewvcviewvc
1.1.0
viewvcviewvc
1.1.1
viewvcviewvc
1.1.2
viewvcviewvc
1.1.3
viewvcviewvc
1.1.4
viewvcviewvc
1.1.5
viewvcviewvc
1.1.6
viewvcviewvc
1.1.7
viewvcviewvc
1.1.8
viewvcviewvc
1.1.9
viewvcviewvc
1.1.10
viewvcviewvc
1.1.11
viewvcviewvc
1.1.12
viewvcviewvc
1.1.13
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
viewvc
yakkety
not-affected
xenial
not-affected
wily
ignored
vivid
ignored
utopic
ignored
trusty
dne
saucy
ignored
raring
ignored
quantal
ignored
precise
Fixed 1.1.5-1.1+squeeze2build0.12.04.1
released
oneiric
ignored
natty
ignored
lucid
ignored
hardy
ignored
References