Mercurial Incorrect Access Control vulnerability
Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-1000132US | critical9.1 | — | ||
Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to… | ||||
02
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2019:2276WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/mercurial/PYSEC-2018-87.yamlWEB
- https://lists.debian.org/debian-lts-announce/2018/03/msg00034.htmlWEB
- https://lists.debian.org/debian-lts-announce/2018/07/msg00005.htmlWEB
- https://lists.debian.org/debian-lts-announce/2020/07/msg00032.htmlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000132ADVISORY
- https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan