PT-2017-13838 · Teampass · Teampass

Published 2017-11-27 · Updated 2022-05-13 · CVE-2017-15053

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9

Description The issue allows a manager user to modify or delete any arbitrary roles within the application due to improper access control enforcement when requesting roles.queries.php. To exploit this, an authenticated attacker with manager rights must tamper with requests, for example, by changing the id parameter when invoking the delete role function on the "roles.queries.php" endpoint.

Recommendations For versions prior to 2.1.27.9, update to version 2.1.27.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the "roles.queries.php" endpoint or limiting the ability to invoke the delete role function to minimize the risk of exploitation.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-15053

GHSA-XVJF-394G-PHRR

Affected Products

Teampass

References · 7

• 🔥 http://blog.amossys.fr/teampass-multiple-cve-01.html · Exploit
• https://github.com/nilsteampassnet/TeamPass/commit/ef32e9c28b6ddc33cee8a25255bc8da54434af3e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-15053 · Security Note
• https://osv.dev/vulnerability/CVE-2017-15053 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xvjf-394g-phrr · Vendor Advisory
• https://github.com/nilsteampassnet/TeamPass · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15053 · Note