Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: TeamPass 3.1.3.1 Clear all filters
TI-2024-34097 CVE-2024-50702 · GHSA-7rm3-4w6j-8xx4

Improper authorization in nilsteampassnet TeamPass

Priority LOW 24

TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00309 Published 2024-12-30 Fixed in 3.1.3.1 CWE-266
TI-2024-34096 CVE-2024-50701 · GHSA-2697-96mv-3gfm

Improper authorization in nilsteampassnet TeamPass

Priority LOW 20

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00343 Published 2024-12-30 Fixed in 3.1.3.1 CWE-266