TeamPass Improper Privilege Management in nilsteampassnet/teampass
Summary
CVE-2017-15053: TeamPass Improper Privilege Management. Affects nilsteampassnet/teampass versions < 2.1.27.9. Fixed in 2.1.27.9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
TeamPass is an open-source password manager that allows users to store and share passwords securely. It provides role-based access control to manage user permissions and access levels. However, a vulnerability has been discovered in versions before 2.1.27.9 that allows an authenticated manager user to modify or delete arbitrary roles within the application.
Vulnerability Detail
The vulnerability arises due to the improper enforcement of manager access control when requesting roles.queries.php. An attacker with manager rights can tamper with the requests and modify the 'id' parameter to invoke 'delete_role' on roles.queries.php. This enables them to modify any role or delete any role within the application. The impact of this vulnerability can be significant as it allows unauthorized privilege escalation and unauthorized modification or deletion of roles.
How To Fix
Minimum fixed version
2.1.27.9
This is the first release that contains the fix.
composer require nilsteampassnet/teampass:2.1.27.9Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to upgrade to the fixed version to mitigate the risk.
Conclusion
The vulnerability in TeamPass before version 2.1.27.9 allows an authenticated manager user to modify or delete arbitrary roles within the application. To mitigate this risk, it is crucial to upgrade to the fixed version. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for nilsteampassnet/teampass →
FAQ
TeamPass is an open-source password manager that provides secure storage and sharing of passwords.
The vulnerability allows an authenticated manager user to modify or delete any role within the application, leading to unauthorized privilege escalation and unauthorized modification or deletion of roles.
To fix this vulnerability, upgrade to version 2.1.27.9 or later of nilsteampassnet/teampass.
No, there is no known workaround. Upgrading to the fixed version is necessary.
For more information, you can refer to the vulnerability details provided by the GitHub Security Advisory (GHSA-xvjf-394g-phrr).
Related vulnerabilities
Recent vulnerabilities recorded for nilsteampassnet/teampass.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.