On 09.09.15 8:59, Chaman Rathee wrote:

Dear Team,

                               We found following vulnerability in our observium tool :-

 

Vulnerability Detection Result :-

 

We found that Everybody can access/read '.svn/entries'.            using    https://<observium-url/.svn/entries

What you see by these url? (https://<observium-url/.svn/entries)

Normally if you use apache and mod_rewrite enabled and observium installed as described in official docs,
you can not see content of this file (and .svn dir).