VULNERABILITY INTELLIGENCE
CVE-2012-3357
CVSS score5 MEDIUM
EPSS probability1.88%
CISA KEVNot currently listed
Published2012-07-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly handle log messages when a readable path is copied from an unreadable path, which allows remote attackers to obtain sensitive information, related to a "log msg leak."
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor