TeamPass Improper Privilege Management in nilsteampassnet/teampass
Summary
CVE-2017-15052: TeamPass Improper Privilege Management. Affects nilsteampassnet/teampass versions < 2.1.27.9. Fixed in 2.1.27.9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TeamPass is an open-source password manager that allows users to securely store and share passwords within a team or organization. It provides features such as user management, access control, and encryption. However, a vulnerability has been identified in versions before 2.1.27.9 that allows an authenticated attacker with manager rights to delete arbitrary users, including administrators, or modify attributes of any user except the administrator.
Vulnerability Detail
The vulnerability arises from a lack of proper enforcement of manager access control when requesting users.queries.php. This allows an attacker to tamper with the requests and manipulate the "id" parameter to invoke the "delete_user" function on users.queries.php. By exploiting this vulnerability, an attacker can delete any user or modify their attributes, except for the administrator. The impact of this vulnerability can be significant, as it allows unauthorized access and manipulation of user accounts and sensitive information.
How To Fix
Minimum fixed version
2.1.27.9
This is the first release that contains the fix.
composer require nilsteampassnet/teampass:2.1.27.9Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update to the fixed version of TeamPass as soon as possible to mitigate the risk of exploitation.
Conclusion
TeamPass before version 2.1.27.9 is vulnerable to improper privilege management, allowing an attacker with manager rights to delete arbitrary users or modify their attributes. To mitigate this vulnerability, it is crucial to update to the fixed version of TeamPass. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for nilsteampassnet/teampass →
FAQ
TeamPass is an open-source password manager designed for teams and organizations to securely store and share passwords.
The vulnerability allows an attacker with manager rights to delete arbitrary users or modify their attributes, except for the administrator. This can lead to unauthorized access and manipulation of user accounts and sensitive information.
To fix this vulnerability, update TeamPass to version 2.1.27.9 or later. Follow the upgrade instructions provided by the project.
No, there is no known workaround. It is crucial to update to the fixed version of TeamPass to mitigate the risk.
For more information about this vulnerability, refer to the advisory on the GitHub Advisory Database: https://github.com/github/advisory-database/advisories/GHSA-5qr3-4839-88gf
Related vulnerabilities
Recent vulnerabilities recorded for nilsteampassnet/teampass.
