CVE-2010-0005
High
Description
query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to bypass intended access restrictions via a query.
SeverityHigh
CVSS7.5
Exploit probability—
ProductViewvc
PublishedJan 29, 2010
First seenJan 29, 2010
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| viewvc viewvc | v ≤ 1.1.2, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.1.0, 1.1.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.