GHSA-xvjf-394g-phrr

Source

https://github.com/advisories/GHSA-xvjf-394g-phrr

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-xvjf-394g-phrr/GHSA-xvjf-394g-phrr.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-xvjf-394g-phrr

Aliases

CVE-2017-15053

Published

2022-05-13T01:43:37Z

Modified

2024-04-24T22:43:39.347092Z

Severity

4.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

TeamPass Improper Privilege Management

Details

TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting roles.queries.php. It is then possible for a manager user to modify any arbitrary roles within the application, or delete any arbitrary role. To exploit the vulnerability, an authenticated attacker must have the manager rights on the application, then tamper with the requests sent directly, for example by changing the "id" parameter when invoking "delete_role" on roles.queries.php.

Database specific

{
    "nvd_published_at": "2017-11-27T19:29:00Z",
    "cwe_ids": [
        "CWE-269"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2024-04-24T22:28:27Z"
}

References

Affected packages

Packagist / nilsteampassnet/teampass

Package

Name: nilsteampassnet/teampass
Purl: pkg:composer/nilsteampassnet/teampass

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.27.9

Affected versions

2.*

2.1.21

2.1.26

2.1.27