CVE-2010-0004

ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to discover private root…

published January 29, 2010

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to discover private root names by reading this view.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02602 · 85.1th percentile
Published
2010-01-29T18:00Z
EPSS history
Timeline
  • 29 JAN 18:00Z
    ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to discover private root…
    cvelistv5