Evil-DB LogoEvil-DB
← All CVEs

CVE-2015-3184

medium · 5

mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.

5
CVSS
10.6%
EPSS (exploit prob.)
96th
EPSS percentile
2015-08-12
Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

CWE-200

Affected products

VendorProductAffected versions
applexcode<= 7.2.1
apachesubversion1.7.0
apachesubversion1.7.1
apachesubversion1.7.2
apachesubversion1.7.3
apachesubversion1.7.4
apachesubversion1.7.5
apachesubversion1.7.6
apachesubversion1.7.7
apachesubversion1.7.8
apachesubversion1.7.9
apachesubversion1.7.10
apachesubversion1.7.11
apachesubversion1.7.12
apachesubversion1.7.13
apachesubversion1.7.14
apachesubversion1.7.15
apachesubversion1.7.16
apachesubversion1.7.17
apachesubversion1.7.18
apachesubversion1.7.19
apachesubversion1.7.20
apachesubversion1.8.0
apachesubversion1.8.1
apachesubversion1.8.2
apachesubversion1.8.3
apachesubversion1.8.4
apachesubversion1.8.5
apachesubversion1.8.6
apachesubversion1.8.7
apachesubversion1.8.8
apachesubversion1.8.9
apachesubversion1.8.10
apachesubversion1.8.11
apachesubversion1.8.13
apachehttp_server2.4.1
apachehttp_server2.4.2
apachehttp_server2.4.3
apachehttp_server2.4.4
apachehttp_server2.4.6

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-3184