CVE-2015-3184

mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
applexcode
𝑥
≤ 7.2.1
apachesubversion
1.7.0
apachesubversion
1.7.1
apachesubversion
1.7.2
apachesubversion
1.7.3
apachesubversion
1.7.4
apachesubversion
1.7.5
apachesubversion
1.7.6
apachesubversion
1.7.7
apachesubversion
1.7.8
apachesubversion
1.7.9
apachesubversion
1.7.10
apachesubversion
1.7.11
apachesubversion
1.7.12
apachesubversion
1.7.13
apachesubversion
1.7.14
apachesubversion
1.7.15
apachesubversion
1.7.16
apachesubversion
1.7.17
apachesubversion
1.7.18
apachesubversion
1.7.19
apachesubversion
1.7.20
apachesubversion
1.8.0
apachesubversion
1.8.1
apachesubversion
1.8.2
apachesubversion
1.8.3
apachesubversion
1.8.4
apachesubversion
1.8.5
apachesubversion
1.8.6
apachesubversion
1.8.7
apachesubversion
1.8.8
apachesubversion
1.8.9
apachesubversion
1.8.10
apachesubversion
1.8.11
apachesubversion
1.8.13
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
subversion
bullseye (security)
1.14.1-3+deb11u1
fixed
bullseye
1.14.1-3+deb11u1
fixed
wheezy
not-affected
squeeze
not-affected
bookworm
1.14.2-4
fixed
sid
1.14.4-2
fixed
trixie
1.14.4-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
subversion
vivid
Fixed 1.8.10-5ubuntu1.1
released
trusty
Fixed 1.8.8-1ubuntu3.2
released
precise
not-affected