{"id":"CVE-2017-15914","aliases":["GHSA-8q8v-28rm-qw4w","PYSEC-2018-105"],"url":"https://o3.security/vulnerability/CVE-2017-15914","summary":"Borg Improper Access Control vulnerability","details":"Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.","published":"2018-02-08T23:29:01.030Z","modified":"2026-10-24T10:30:56.221345941Z","cvss":{"score":8.8,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.01918,"percentile":0.78883,"asOf":"2026-09-17"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"borgbackup","fixedVersion":"1.1.3"}],"fix":{"url":"https://github.com/borgbackup/borg/commit/75854c1243b29ec5558be6fdefe365cd438abb4c","label":"borgbackup/borg@75854c1"},"references":[{"type":"ADVISORY","url":"http://borgbackup.readthedocs.io/en/stable/changes.html#version-1-1-3-2017-11-27"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15914"},{"type":"WEB","url":"https://github.com/borgbackup/borg/commit/75854c1243b29ec5558be6fdefe365cd438abb4c"},{"type":"PACKAGE","url":"https://github.com/borgbackup/borg"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/borgbackup/PYSEC-2018-105.yaml"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-24T10:30:56.221345941Z"}}