Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.
CVSS Details
- CVSS 3.1 Base Score: 4.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade mod_dav_svnUpgrade subversion-perlUpgrade subversion-toolsUpgrade subversion-libsUpgrade subversion-develUpgrade subversion-gnomeUpgrade subversionUpgrade subversion-javahlUpgrade subversion-svn2clUpgrade subversion-kdeUpgrade subversion-pythonUpgrade subversion-ruby | Dec 1, 2016 | Aug 19, 2014 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | Aug 19, 2014 |
| Freebsd | — | Upgrade subversion17Upgrade subversionUpgrade subversion16 | Dec 10, 2025 | Aug 11, 2014 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion.Upgrade net-libs/serf. | Oct 30, 2017 | Aug 19, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3 | May 29, 2017 | Aug 19, 2014 |
| Oracle_linux | — | Upgrade subversion-javahlUpgrade subversion-pythonUpgrade subversion-kdeUpgrade mod_dav_svnUpgrade subversion-rubyUpgrade subversion-toolsUpgrade subversion-perlUpgrade subversion-develUpgrade subversion-gnomeUpgrade subversion-libsUpgrade subversion | Oct 16, 2024 | Aug 19, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 13, 2013 |
| Suse | — | Upgrade subversion-toolsUpgrade subversion-bash-completionUpgrade subversion-serverUpgrade subversion-develUpgrade subversion-pythonUpgrade subversion-perlUpgrade libsvn_auth_kwallet-1-0Upgrade libsvn_auth_gnome_keyring-1-0Upgrade subversion | Dec 18, 2015 | Aug 19, 2014 |
| Ubuntu | — | Upgrade subversionUpgrade libsvn1Upgrade libapache2-svn | Nov 8, 2024 | Aug 19, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub