CVE-2010-0004
viewvc viewvc: no CVSS score yet. EPSS 2.6% chance of exploitation in the next 30 days.
ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to discover private root names by reading this view.
- EPSS
- 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- viewvc:viewvc
References
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html
- http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/trunk/docs/release-notes/1.1.0.html?revision=2222
- http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2242&r2=2313&pathrev=HEAD
- http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2300
- http://www.openwall.com/lists/oss-security/2010/01/11/2