Summary
ViewVC is prone to these security vulnerabilities:
- A security vulnerability that involves root listing of per-root authorization configuration.
- A security vulnerability in 'query.py' involving the 'forbidden' authorizer (or none).
Versions prior to ViewVC 1.1.3 are vulnerable.
Solution
Vendor updates are available. Please see the references for details.
References
Severity
Classification
-
CVE CVE-2010-0004, CVE-2010-0005 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities