VULNERABILITY INTELLIGENCE
CVE-2015-3184
CVSS score5 MEDIUM
EPSS probability10.61%
CISA KEVNot currently listed
Published2015-08-12
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict anonymous access, which allows remote anonymous users to read hidden files via the path name.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor