NetSight
IP …
high7.5

CVE-2010-0005

query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remo…

Impact

query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to bypass intended access restrictions via a query.

Affected products

VendorProductAffected versions
ViewvcViewvc
through 1.1.2
Versions 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5

Weakness classification

CWE-264

References