CVE-2009-0240

EPSS 0.41%
Veröffentlicht 21.01.2009 02:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

listing.php in WebSVN 2.0 and possibly 1.7 beta, when using an SVN authz file, allows remote authenticated users to read changelogs or diffs for restricted projects via a modified repname parameter.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Tigris ≫ Websvn Version2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.41%	0.606

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:P/I:N/A:N

http://secunia.com/advisories/32338

Vendor Advisory

http://secunia.com/advisories/34191

http://www.gentoo.org/security/en/glsa/glsa-200903-20.xml

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512191

http://secunia.com/advisories/33945

http://www.debian.org/security/2009/dsa-1725

http://www.openwall.com/lists/oss-security/2009/01/18/2

https://exchange.xforce.ibmcloud.com/vulnerabilities/48171

https://nvd.nist.gov/vuln/detail/CVE-2009-0240

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0240

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0240

EUVD