4.3

CVE-2008-1292

ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading (1) forbidden pathnames in the revision view, (2) log history that can only be reached by traversing a forbidden object, or (3) forbidden diff view path parameters.

Data is provided by the National Vulnerability Database (NVD)
Viewvc ≫ Viewvc Version1.0.2
   Gentoo ≫ Linux
   Redhat ≫ Fedora Version7
   Redhat ≫ Fedora Version8
Viewvc ≫ Viewvc Version1.0.3
   Gentoo ≫ Linux
   Redhat ≫ Fedora Version7
   Redhat ≫ Fedora Version8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.72% 0.715
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.