CVE-2014-3528

EPSS 7.56%
Veröffentlicht 19.08.2014 18:55:02
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 16

NVD 103 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Opensuse ≫ Opensuse Version 12.3

Opensuse ≫ Opensuse Version 13.1

Apache ≫ Subversion Version 1.0.0

Apache ≫ Subversion Version 1.0.1

Apache ≫ Subversion Version 1.0.2

Apache ≫ Subversion Version 1.0.3

Apache ≫ Subversion Version 1.0.4

Apache ≫ Subversion Version 1.0.5

Apache ≫ Subversion Version 1.0.6

Apache ≫ Subversion Version 1.0.7

Apache ≫ Subversion Version 1.0.8

Apache ≫ Subversion Version 1.0.9

Apache ≫ Subversion Version 1.1.0

Apache ≫ Subversion Version 1.1.1

Apache ≫ Subversion Version 1.1.2

Apache ≫ Subversion Version 1.1.3

Apache ≫ Subversion Version 1.1.4

Apache ≫ Subversion Version 1.2.0

Apache ≫ Subversion Version 1.2.1

Apache ≫ Subversion Version 1.2.2

Apache ≫ Subversion Version 1.2.3

Apache ≫ Subversion Version 1.3.0

Apache ≫ Subversion Version 1.3.1

Apache ≫ Subversion Version 1.3.2

Apache ≫ Subversion Version 1.4.0

Apache ≫ Subversion Version 1.4.1

Apache ≫ Subversion Version 1.4.2

Apache ≫ Subversion Version 1.4.3

Apache ≫ Subversion Version 1.4.4

Apache ≫ Subversion Version 1.4.5

Apache ≫ Subversion Version 1.4.6

Apache ≫ Subversion Version 1.5.0

Apache ≫ Subversion Version 1.5.1

Apache ≫ Subversion Version 1.5.2

Apache ≫ Subversion Version 1.5.3

Apache ≫ Subversion Version 1.5.4

Apache ≫ Subversion Version 1.5.5

Apache ≫ Subversion Version 1.5.6

Apache ≫ Subversion Version 1.5.7

Apache ≫ Subversion Version 1.5.8

Apache ≫ Subversion Version 1.6.0

Apache ≫ Subversion Version 1.6.1

Apache ≫ Subversion Version 1.6.2

Apache ≫ Subversion Version 1.6.3

Apache ≫ Subversion Version 1.6.4

Apache ≫ Subversion Version 1.6.5

Apache ≫ Subversion Version 1.6.6

Apache ≫ Subversion Version 1.6.7

Apache ≫ Subversion Version 1.6.8

Apache ≫ Subversion Version 1.6.9

Apache ≫ Subversion Version 1.6.10

Apache ≫ Subversion Version 1.6.11

Apache ≫ Subversion Version 1.6.12

Apache ≫ Subversion Version 1.6.13

Apache ≫ Subversion Version 1.6.14

Apache ≫ Subversion Version 1.6.15

Apache ≫ Subversion Version 1.6.16

Apache ≫ Subversion Version 1.6.17

Apache ≫ Subversion Version 1.6.18

Apache ≫ Subversion Version 1.6.19

Apache ≫ Subversion Version 1.6.20

Apache ≫ Subversion Version 1.6.21

Apache ≫ Subversion Version 1.6.23

Apache ≫ Subversion Version 1.7.0

Apache ≫ Subversion Version 1.7.1

Apache ≫ Subversion Version 1.7.2

Apache ≫ Subversion Version 1.7.3

Apache ≫ Subversion Version 1.7.4

Apache ≫ Subversion Version 1.7.5

Apache ≫ Subversion Version 1.7.6

Apache ≫ Subversion Version 1.7.7

Apache ≫ Subversion Version 1.7.8

Apache ≫ Subversion Version 1.7.9

Apache ≫ Subversion Version 1.7.10

Apache ≫ Subversion Version 1.7.11

Apache ≫ Subversion Version 1.7.12

Apache ≫ Subversion Version 1.7.13

Apache ≫ Subversion Version 1.7.14

Apache ≫ Subversion Version 1.7.15

Apache ≫ Subversion Version 1.7.16

Apache ≫ Subversion Version 1.7.17

Apache ≫ Subversion Version 1.8.0

Apache ≫ Subversion Version 1.8.1

Apache ≫ Subversion Version 1.8.2

Apache ≫ Subversion Version 1.8.3

Apache ≫ Subversion Version 1.8.4

Apache ≫ Subversion Version 1.8.5

Apache ≫ Subversion Version 1.8.6

Apache ≫ Subversion Version 1.8.7

Apache ≫ Subversion Version 1.8.8

Apache ≫ Subversion Version 1.8.9

Canonical ≫ Ubuntu Linux Version 12.04 Update - Edition lts

Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts

Apple ≫ XCode Version 6.1.1

Redhat ≫ Enterprise Linux Desktop Version 6.0

Redhat ≫ Enterprise Linux Desktop Version 7.0

Redhat ≫ Enterprise Linux Hpc Node Version 6.0

Redhat ≫ Enterprise Linux Hpc Node Version 7.0

Redhat ≫ Enterprise Linux Server Version 6.0

Redhat ≫ Enterprise Linux Server Version 7.0

Redhat ≫ Enterprise Linux Server Eus Version 6.6.z

Redhat ≫ Enterprise Linux Workstation Version 6.0

Redhat ≫ Enterprise Linux Workstation Version 7.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	7.56%	0.939

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4	4.9	4.9	AV:N/AC:H/Au:N/C:P/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

http://secunia.com/advisories/60722

http://www.ubuntu.com/usn/USN-2316-1

Vendor Advisory

https://security.gentoo.org/glsa/201610-05

http://lists.opensuse.org/opensuse-updates/2014-08/msg00038.html

Third Party Advisory

http://secunia.com/advisories/59584

http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.html

Third Party Advisory

Mailing List

http://secunia.com/advisories/59432

https://support.apple.com/HT204427

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0165.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0166.html

Third Party Advisory

http://subversion.apache.org/security/CVE-2014-3528-advisory.txt

Vendor Advisory

http://www.securityfocus.com/bid/68995

https://nvd.nist.gov/vuln/detail/CVE-2014-3528

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-3528

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-3528

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2014-3528