CVE-2007-2448: Low severity Subversion Subversion vulnerability
Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information (revision properties) via svn (1) propget, (2) proplist, or (3) propedit.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2448?
CVE-2007-2448 is considered a medium severity vulnerability due to its potential exposure of sensitive revision properties.
How do I fix CVE-2007-2448?
To fix CVE-2007-2448, upgrade to Subversion version 1.4.4 or later to ensure proper implementation of access controls.
What versions of Subversion are affected by CVE-2007-2448?
CVE-2007-2448 affects Subversion versions 1.4.3 and earlier.
What can attackers do with CVE-2007-2448?
Attackers with authenticated access can exploit CVE-2007-2448 to retrieve sensitive information from revision properties.
Is CVE-2007-2448 a local or remote vulnerability?
CVE-2007-2448 is a remote vulnerability that allows authenticated users to exploit the access control failure.