CVE-2014-3528
Publicada em · Atualizada em
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 7.4%
probabilidade de exploração
7.4%top 6% das CVEs
exploração observada
nãonenhuma fonte reporta
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.
Produtos afetados
n/a · n/aReferências
http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.htmlhttp://lists.opensuse.org/opensuse-updates/2014-08/msg00038.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0165.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0166.htmlhttp://secunia.com/advisories/59432http://secunia.com/advisories/59584http://secunia.com/advisories/60722https://security.gentoo.org/glsa/201610-05https://support.apple.com/HT204427http://subversion.apache.org/security/CVE-2014-3528-advisory.txthttp://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlhttp://www.securityfocus.com/bid/68995