REDHAT-BUG-709114: Low severity Apache subversion vulnerability
An unintended file contents disclosure flaw was found in the way moddavsvn module of the subversion concurrent version control system processed certain URLs, when path-access control for files and directories was enabled. A remote attacker could use this flaw to obtain information, which should be otherwise prohibited by the authorization subsystem.
Acknowledgements:
Red Hat would like to thank the Apache Subversion project for reporting this issue. Upstream acknowledges Kamesh Jayachandran of CollabNet, Inc. as the original reporter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-709114?
The severity of REDHAT-BUG-709114 is high due to the potential for unintended file contents disclosure.
How do I fix REDHAT-BUG-709114?
To fix REDHAT-BUG-709114, apply the latest patches provided by the Apache Subversion maintainers.
Who is affected by REDHAT-BUG-709114?
Users of the Apache Subversion concurrent version control system with enabled path-access control for files and directories are affected by REDHAT-BUG-709114.
What type of vulnerability is REDHAT-BUG-709114?
REDHAT-BUG-709114 is classified as an unintended file contents disclosure vulnerability.
Can REDHAT-BUG-709114 be exploited remotely?
Yes, a remote attacker can exploit REDHAT-BUG-709114 to gain unauthorized access to sensitive information.