CVE-2017-15914 - Incorrect implementation of access controls allows remote users to override repository restrictions

CVE-2017-15914

Summary

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.

References

Vulnerable Configurations

cpe:2.3:a:borgbackup:borg:1.1.0:-:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:-:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:beta1:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:beta1:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:beta2:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:beta2:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:beta3:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:beta3:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:beta4:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:beta4:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:beta5:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:beta5:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:beta6:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:beta6:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:rc1:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:rc2:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:rc2:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:rc3:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:rc3:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:rc4:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.0:rc4:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:borgbackup:borg:1.1.2:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:S/C:P/I:P/A:P

refmap via4

confirm

Last major update

03-10-2019 - 00:03

Published

08-02-2018 - 23:29

Last modified

03-10-2019 - 00:03