Informazioni sul CVE-2021-28544
Apache Subversion SVN authz protected copyfrom paths regression
CWE ID: CWE-200
Base Score (CVSS): N/A
CVE: CVE-2021-28544
Descrizione: Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal ‘copyfrom’ paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with access to the copy can see the ‘copyfrom’ path of the original. This also reveals the fact that the node was copied. Only the ‘copyfrom’ path is revealed; not its contents. Both httpd and svnserve servers are vulnerable.
Vettore di attacco
Punteggio CVSS
Il CVSS è un sistema di valutazione che misura la gravità di una vulnerabilità informatica considerando fattori come l’impatto potenziale, la probabilità di attacco e la facilità di esecuzione.
Riassunto: .
Dettaglio del Vettore
| Metrica | Valore | Significato | Descrizione |
|---|
Riferimenti esterni
- https://subversion.apache.org/security/CVE-2021-28544-advisory.txt
- https://www.debian.org/security/2022/dsa-5119
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YJPMCWCGWBN3QWCDVILWQWPC75RR67LT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZ4ARNGLMGYBKYDX2B7DRBNMF6EH3A6R/
- https://support.apple.com/kb/HT213345
- http://seclists.org/fulldisclosure/2022/Jul/18
Prodotti interessati
- Apache Software Foundation – Apache Subversion
Relazioni con altri prodotti
Produttore:Apache Software Foundation
Prodotto: Apache Subversion
Anno: 2021
CWE: CWE-200
CVSS: 0.0