{"id":"CVE-2017-15914","aliases":["GHSA-8q8v-28rm-qw4w","PYSEC-2018-105"],"url":"https://o3.security/vulnerability/CVE-2017-15914","summary":"Borg Improper Access Control vulnerability","details":"Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.","published":"2018-02-08T23:29:01.030Z","modified":"2026-07-08T12:41:16.986600Z","cvss":{"score":8.8,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.01918,"percentile":0.78883,"asOf":"2026-09-17"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"borgbackup","fixedVersion":"1.1.3"}],"fix":null,"references":[{"type":"ADVISORY","url":"http://borgbackup.readthedocs.io/en/stable/changes.html#version-1-1-3-2017-11-27"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T12:41:16.986600Z"}}