CVE-2011-1921

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit…

published June 6, 2011

CVSS
—
EPSS
6%
Percentile
93.3
In the wild
Unconfirmed
What it is

The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05993 · 93.3th percentile
Published
2011-06-06T19:00Z
EPSS history
Timeline
  • 06 JUN 19:00Z
    The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit…
    cvelistv5