Unrated severityNVD Advisory· Published Aug 12, 2015· Updated Jun 17, 2026
CVE-2015-3187
CVE-2015-3187
Description
The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:*range: <=1.7.20
- cpe:2.3:a:apache:subversion:1.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:subversion:1.8.10:*:*:*:*:*:*:*
- cpe:2.3:a:apache:subversion:1.8.11:*:*:*:*:*:*:*
- cpe:2.3:a:apache:subversion:1.8.13:*:*:*:*:*:*:*
- cpe:2.3:a:apache:subversion:1.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:subversion:1.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:subversion:1.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:apache:subversion:1.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:apache:subversion:1.8.6:*:*:*:*:*:*:*
- cpe:2.3:a:apache:subversion:1.8.7:*:*:*:*:*:*:*
- cpe:2.3:a:apache:subversion:1.8.8:*:*:*:*:*:*:*
- cpe:2.3:a:apache:subversion:1.8.9:*:*:*:*:*:*:*
- (no CPE)range: <1.7.21 && >=1.8.0 <1.8.14
- osv-coords6 versionspkg:rpm/opensuse/subversion&distro=openSUSE%20Tumbleweedpkg:rpm/suse/subversion&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/subversion&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012pkg:rpm/suse/subversion&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2pkg:rpm/suse/subversion&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/subversion&distro=SUSE%20Studio%20Onsite%201.3
< 1.9.5-1.1+ 5 more
- (no CPE)range: < 1.9.5-1.1
- (no CPE)range: < 1.6.17-1.35.1
- (no CPE)range: < 1.8.10-15.1
- (no CPE)range: < 1.8.19-25.3.1
- (no CPE)range: < 1.8.19-25.3.1
- (no CPE)range: < 1.6.17-1.35.1
Patches
Vulnerability mechanics
References
11- subversion.apache.org/security/CVE-2015-3187-advisory.txtnvdVendor Advisory
- support.apple.com/HT206172nvdVendor Advisory
- lists.apple.com/archives/security-announce/2016/Mar/msg00003.htmlnvd
- lists.opensuse.org/opensuse-updates/2015-08/msg00022.htmlnvd
- rhn.redhat.com/errata/RHSA-2015-1633.htmlnvd
- rhn.redhat.com/errata/RHSA-2015-1742.htmlnvd
- www.debian.org/security/2015/dsa-3331nvd
- www.securityfocus.com/bid/76273nvd
- www.securitytracker.com/id/1033215nvd
- www.ubuntu.com/usn/USN-2721-1nvd
- security.gentoo.org/glsa/201610-05nvd
News mentions
0No linked articles in our index yet.