CVE-2017-15914

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-15914
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-15914.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-15914
Aliases
Downstream
Related
Published
2018-02-08T23:29:01.030Z
Modified
2026-03-12T22:37:49.868689Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.

References

Affected packages

Git / github.com/borgbackup/borg

Affected ranges

Type
GIT
Repo
https://github.com/borgbackup/borg
Events
Introduced
69f73b1752dae6e79a5bf03fe476f1d1b8ab9315
Fixed
dc8de361095eea509a28d416ab826850047432ce
Database specific 
{
    "versions": [
        {
            "introduced": "1.1.0"
        },
        {
            "fixed": "1.1.3"
        }
    ]
}

Affected versions

1.*
1.0.10rc1
1.0.4
1.0.5
1.0.6
1.0.6rc1
1.0.7
1.0.7bin
1.0.7rc1
1.0.7rc2
1.0.8
1.0.8rc1
1.0.9
1.0.9rc1
1.1.0
1.1.0.dev0
1.1.0b1
1.1.0b2
1.1.0b3
1.1.0b4
1.1.0b5
1.1.0b6
1.1.0rc1
1.1.0rc2
1.1.0rc3
1.1.0rc4
1.1.1
1.1.2
1.1.dev0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-15914.json"