CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.
Score: 0.0
Priority: Unclassified
Score: 0.04739
Percentile:
0.88958
CVSS v2 Score: 5.0
Severity: