Lucene search
Veracode Vulnerability DatabaseVERACODE:5927HistoryMar 15, 2018 - 8:58 a.m.
Authorization Bypass
2018-03-1508:58:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.002
Percentile
58.8%
mercurial is vulnerable to authorization bypasses. The application does not check for access permissions if the wire protocol command if has no permissions declared, allowing a malicious user to gain unauthorized access to a repository.
References
access.redhat.com/errata/RHSA-2019:2276
lists.debian.org/debian-lts-announce/2018/03/msg00034.html
lists.debian.org/debian-lts-announce/2018/07/msg00005.html
lists.debian.org/debian-lts-announce/2020/07/msg00032.html
www.mercurial-scm.org/repo/hg/rev/2ecb0fc535b1
www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29
Related
cve
cve
CVE-2018-1000132
2018-03-14 13:29:00
nessus
nessus
EulerOS 2.0 SP2 : mercurial (EulerOS-SA-2018-1112)
2018-05-02 00:00:00
EulerOS 2.0 SP1 : mercurial (EulerOS-SA-2018-1142)
2018-05-29 00:00:00
Photon OS 2.0: Mercurial PHSA-2018-2.0-0037
2024-07-23 00:00:00
redhatcve
redhatcve
CVE-2018-1000132
2018-03-14 03:18:50
cvelist
cvelist
CVE-2018-1000132
2018-03-14 13:00:00
osv
osv
PYSEC-2018-87
2018-03-14 13:29:00
mercurial - security update
2018-03-30 00:00:00
CVE-2018-1000132
2018-03-14 13:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for mercurial (EulerOS-SA-2018-1142)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for mercurial (EulerOS-SA-2018-1178)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for mercurial (EulerOS-SA-2018-1112)
2020-01-23 00:00:00
nvd
nvd
CVE-2018-1000132
2018-03-14 13:29:00
debiancve
debiancve
CVE-2018-1000132
2018-03-14 13:29:00
prion
prion
Improper access control
2018-03-14 13:29:00
ubuntucve
ubuntucve
CVE-2018-1000132
2018-03-14 00:00:00
github
github
Mercurial Incorrect Access Control vulnerability
2022-05-13 01:24:55
debian
debian
[SECURITY] [DLA 1331-1] mercurial security update
2018-03-30 15:34:41
[SECURITY] [DLA 1414-1] mercurial security update
2018-07-05 21:00:52
[SECURITY] [DLA 2293-1] mercurial security update
2020-07-31 11:06:17
alpinelinux
alpinelinux
CVE-2018-1000132
2018-03-14 13:29:00
redhat
redhat
(RHSA-2019:2276) Moderate: mercurial security update
2019-08-06 08:20:05
centos
centos
emacs, mercurial security update
2019-08-30 03:38:48
oraclelinux
oraclelinux
mercurial security update
2019-08-13 00:00:00
mageia
mageia
Updated mercurial packages fix security vulnerabilities
2018-09-01 00:11:59
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2018-2.0-0037
2018-04-23 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2018-1.0-0126
2018-04-24 00:00:00
Critical Photon OS Security Update - PHSA-2018-0126
2018-04-24 00:00:00