You are running a version of Subversion which is older than 1.0.8 or 1.1.0-rc4. A flaw exist in older version, in the apache module mod_authz_svn, which fails to properly restrict access to metadata within unreadable paths. An attacker can read metadata in unreadable paths, which can contain sensitive information such as logs and paths.
Upgrade to subversion 1.0.8, 1.1.0-rc4 or newer
CVSS Base Score: 5.0