PT-2007-3773 · Apache · Subversion+1

Publicado 2007-06-14 · Atualizado 2024-06-15 · CVE-2007-2448

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:N/AC:H/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Subversion versions 1.4.3 and earlier

Description The issue allows remote authenticated users to obtain sensitive information, specifically revision properties, due to improper implementation of the "partial access" privilege. This can be achieved via svn commands such as propget, proplist, or propedit.

Recommendations For Subversion versions 1.4.3 and earlier, update to a version that properly implements the "partial access" privilege to prevent unauthorized access to sensitive information.

Correção

Identificadores relacionados

CVE-2007-2448

OPENSUSE-SU-2024:11412-1

Produtos afetados

Apache Subversion

Subversion

Referências · 20

• https://suse.com/security/cve/CVE-2007-2448 · Nota
• https://suse.com/security/cve/CVE-2018-11803 · Nota
• http://vupen.com/english/advisories/2011/0264 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11412-1 · Aviso do Fabricante
• https://issues.rpath.com/browse/RPL-1896 · Nota
• https://security-tracker.debian.org/tracker/CVE-2007-2448 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-9800 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2448 · Nota de Segurança
• https://suse.com/security/cve/CVE-2019-0203 · Nota
• http://subversion.tigris.org/security/CVE-2007-2448-advisory.txt · Nota
• http://ubuntu.com/usn/USN-1053-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2007-2448 · Aviso do Fabricante
• http://secunia.com/advisories/43139 · Nota
• http://securityfocus.com/bid/24463 · Correção
• http://securitytracker.com/id?1018237 · Correção