Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2010-3315

authz.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x before 1.5.8 and 1.6.x before 1.6.13, when SVNPathAuthz short_circuit is enabled, does not properly handle a named repository as a rule scope, which allows remote authenticated users to bypass intended access restrictions via svn commands.

  • Published: Oct 4, 2010
  • Updated: Apr 13, 2023
  • CVE: CVE-2010-3315
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6
  • AV:N/AC:M/Au:S/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
apache / subversion 1.6.10 1.6.10.x
apache / subversion 1.6.2 1.6.2.x
apache / subversion 1.6.5 1.6.5.x
apache / subversion 1.6.3 1.6.3.x
apache / subversion 1.6.8 1.6.8.x
apache / subversion 1.6.0 1.6.0.x
apache / subversion 1.6.7 1.6.7.x
apache / subversion 1.6.12 1.6.12.x
apache / subversion 1.6.1 1.6.1.x
apache / subversion 1.6.4 1.6.4.x
apache / subversion 1.6.11 1.6.11.x
apache / subversion 1.6.6 1.6.6.x
apache / subversion 1.6.9 1.6.9.x
apache / subversion 1.5.5 1.5.5.x
apache / subversion 1.5.3 1.5.3.x
apache / subversion 1.5.7 1.5.7.x
apache / subversion 1.5.2 1.5.2.x
apache / subversion 1.5.4 1.5.4.x
apache / subversion 1.5.1 1.5.1.x
apache / subversion 1.5.6 1.5.6.x
apache / subversion 1.5.0 1.5.0.x