CVE-2011-1921
EPSS 4.0%Published: 6/6/2011Modified: 4/28/2026
Also known as:DEBIAN-CVE-2011-1921
Description
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.
Affected packages (1)
- Debian/subversionfrom 0, < 1.6.17dfsg-1