CVE-2011-1921
EPSS 4.0%發布日:2011/6/6修改日:2026/4/28
也稱為:DEBIAN-CVE-2011-1921
描述
The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17, when the SVNPathAuthz short_circuit option is disabled, does not properly enforce permissions for files that had been publicly readable in the past, which allows remote attackers to obtain sensitive information via a replay REPORT operation.
受影響套件(1)
- Debian/subversionfrom 0, < 1.6.17dfsg-1