GitHub Advisoryadvisory · Packagist

GHSA-xvjf-394g-phrr TeamPass Improper Privilege Management

MEDIUM Published 2022-05-13 Modified 2024-04-24 Official page ↗
Aliases
CVE-2017-15053
Ecosystem
Packagist
Packages
nilsteampassnet/teampass
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-269
Reviewed
2024-04-24

Affected packages

• Packagist nilsteampassnet/teampass: < 2.1.27.9 → fixed in 2.1.27.9

Description

TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting roles.queries.php. It is then possible for a manager user to modify any arbitrary roles within the application, or delete any arbitrary role. To exploit the vulnerability, an authenticated attacker must have the manager rights on the application, then tamper with the requests sent directly, for example by changing the "id" parameter when invoking "delete_role" on roles.queries.php.

Related

Alias · CVE (1)

  • CVE-2017-15053 TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting roles.queries.php. vulnerability

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References