CVEvulnerability
CVE-2014-3528
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-255
Description
Apache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of the URL and authentication realm to store cached credentials, which makes it easier for remote servers to obtain the credentials via a crafted authentication realm.
Affected configurations
• opensuse opensuse 12.3
• opensuse opensuse 13.1
• apache subversion 1.0.0
• apache subversion 1.0.1
• apache subversion 1.0.2
• apache subversion 1.0.3
• apache subversion 1.0.4
• apache subversion 1.0.5
• apache subversion 1.0.6
• apache subversion 1.0.7
• apache subversion 1.0.8
• apache subversion 1.0.9
• apache subversion 1.1.0
• apache subversion 1.1.1
• apache subversion 1.1.2
• apache subversion 1.1.3
• apache subversion 1.1.4
• apache subversion 1.2.0
• apache subversion 1.2.1
• apache subversion 1.2.2
• apache subversion 1.2.3
• apache subversion 1.3.0
• apache subversion 1.3.1
• apache subversion 1.3.2
• apache subversion 1.4.0
• apache subversion 1.4.1
• apache subversion 1.4.2
• apache subversion 1.4.3
• apache subversion 1.4.4
• apache subversion 1.4.5
• apache subversion 1.4.6
• apache subversion 1.5.0
• apache subversion 1.5.1
• apache subversion 1.5.2
• apache subversion 1.5.3
• apache subversion 1.5.4
• apache subversion 1.5.5
• apache subversion 1.5.6
• apache subversion 1.5.7
• apache subversion 1.5.8
• apache subversion 1.6.0
• apache subversion 1.6.1
• apache subversion 1.6.2
• apache subversion 1.6.3
• apache subversion 1.6.4
• apache subversion 1.6.5
• apache subversion 1.6.6
• apache subversion 1.6.7
• apache subversion 1.6.8
• apache subversion 1.6.9
• apache subversion 1.6.10
• apache subversion 1.6.11
• apache subversion 1.6.12
• apache subversion 1.6.13
• apache subversion 1.6.14
• apache subversion 1.6.15
• apache subversion 1.6.16
• apache subversion 1.6.17
• apache subversion 1.6.18
• apache subversion 1.6.19
… and 43 more
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2014-08/msg00038.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0165.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0166.html Third Party Advisory
- http://secunia.com/advisories/59432 secunia.com
- http://secunia.com/advisories/59584 secunia.com
- http://secunia.com/advisories/60722 secunia.com
- http://subversion.apache.org/security/CVE-2014-3528-advisory.txt Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html www.oracle.com
- http://www.securityfocus.com/bid/68995 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-2316-1 Vendor Advisory
- https://security.gentoo.org/glsa/201610-05 security.gentoo.org
- https://support.apple.com/HT204427 Third Party Advisory
- http://lists.apple.com/archives/security-announce/2015/Mar/msg00003.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2014-08/msg00038.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0165.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0166.html Third Party Advisory
- http://secunia.com/advisories/59432 secunia.com
- http://secunia.com/advisories/59584 secunia.com
- http://secunia.com/advisories/60722 secunia.com
- http://subversion.apache.org/security/CVE-2014-3528-advisory.txt Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html www.oracle.com
- http://www.securityfocus.com/bid/68995 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-2316-1 Vendor Advisory
- https://security.gentoo.org/glsa/201610-05 security.gentoo.org
- https://support.apple.com/HT204427 Third Party Advisory