Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.
CVSS Details
- CVSS 3.1 Base Score: 4.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade subversion-svn2clUpgrade subversion-javahlUpgrade subversion-pythonUpgrade subversion-kdeUpgrade subversion-rubyUpgrade mod_dav_svnUpgrade subversion-develUpgrade subversionUpgrade subversion-gnomeUpgrade subversion-libsUpgrade subversion-perlUpgrade subversion-tools | Dec 1, 2016 | Aug 19, 2014 |
| Debian | — | Upgrade subversion | Jul 30, 2024 | Aug 19, 2014 |
| Freebsd | — | Upgrade subversion16Upgrade subversionUpgrade subversion17 | Dec 10, 2025 | Aug 11, 2014 |
| Gentoo Linux | — | Upgrade dev-vcs/subversion.Upgrade net-libs/serf. | Oct 30, 2017 | Aug 19, 2014 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3 | May 29, 2017 | Aug 19, 2014 |
| Oracle_linux | — | Upgrade subversionUpgrade subversion-gnomeUpgrade subversion-libsUpgrade subversion-javahlUpgrade subversion-pythonUpgrade subversion-kdeUpgrade subversion-perlUpgrade subversion-develUpgrade subversion-toolsUpgrade subversion-rubyUpgrade mod_dav_svn | Oct 16, 2024 | Aug 19, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 13, 2013 |
| Suse | — | Upgrade libsvn_auth_kwallet-1-0Upgrade subversion-toolsUpgrade subversion-pythonUpgrade subversion-develUpgrade subversion-perlUpgrade subversion-serverUpgrade subversion-bash-completionUpgrade subversionUpgrade libsvn_auth_gnome_keyring-1-0 | Dec 18, 2015 | Aug 19, 2014 |
| Ubuntu | — | Upgrade subversionUpgrade libsvn1Upgrade libapache2-svn | Nov 8, 2024 | Aug 19, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub