CVE-2008-1292

ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive…

published March 24, 2008

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading (1) forbidden pathnames in the revision view, (2) log history that can only be reached by traversing a forbidden object, or (3) forbidden diff view path parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01370 · 71.7th percentile
Published
2008-03-24T17:00Z
EPSS history
Timeline
  • 24 MAR 17:00Z
    ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive…
    cvelistv5