Back to feed
EUVD-2008-1298 · Published Mar 24, 2008
ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read files and list folders under the hidden CVSROOT folder.
Technologies
Viewvc ViewvcRedhat FedoraGentoo Linux
Weaknesses
CWE-200
CVSS scores
- v2.04.3
AV:N/AC:M/Au:N/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
