VDB

DEBIAN-CVE-2015-3184

DEBIAN-CVE-2015-3184 PUBLISHED

mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.

Affected Products

VendorProductVersions
Debian:13subversion0, 0, 0
Debian:11subversion0, 0, 0
Debian:14subversion0, 0, 0
Debian:12subversion0, 0, 0

Timeline

  • Aug 12, 2015 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›