CVE-2024-50702: TeamPass Mail Operation Authorization Issue
Summary
CVE-2024-50702: TeamPass mail_me operation authorization issue. Affects nilsteampassnet/teampass versions < 3.1.3.1. Fixed in 3.1.3.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TeamPass is an open-source password management solution designed for teams to securely share and manage passwords and sensitive information. It provides features such as user management, password generation, and secure storage. However, prior to version 3.1.3.1, TeamPass had a significant vulnerability related to the mail_me operation, which did not adequately verify whether the action was being performed by an authorized administrator or manager. This oversight could potentially allow unauthorized users to execute mail operations, leading to data exposure or misuse.
Vulnerability Detail
The vulnerability in TeamPass arises from improper authorization checks in the mail_me operation, also known as action_mail. This flaw allows users without sufficient privileges to perform actions intended for administrators or managers, potentially leading to unauthorized access to sensitive information. The lack of proper validation can result in data leaks, where unauthorized users could send emails containing sensitive data or perform actions that compromise the integrity of the application.
How To Fix
Minimum fixed version
3.1.3.1
This is the first release that contains the fix.
composer require nilsteampassnet/teampass:3.1.3.1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, restrict access to the mail_me operation by modifying user permissions to ensure that only authorized users (administrators or managers) can perform this action. This can be done through the TeamPass user management interface.
Conclusion
The CVE-2024-50702 vulnerability in TeamPass poses a moderate risk due to improper authorization checks in the mail_me operation. It is crucial for users to update to the patched version 3.1.3.1 to mitigate this risk. Additionally, using Vulert can help monitor and alert for such vulnerabilities in real-time, ensuring better security for your applications.
See every vulnerability recorded for nilsteampassnet/teampass →
FAQ
The CVSS score for this vulnerability is 5.4, indicating a moderate severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If exploited, this vulnerability could allow unauthorized users to send emails or access sensitive information, leading to data breaches.
Yes, the vulnerability has been patched in TeamPass version 3.1.3.1. It is recommended to update to this version or later.
If an immediate update is not possible, consider restricting user permissions to limit access to the mail_me operation as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for nilsteampassnet/teampass.
