Описание
TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side. This attack appears to be exploitable via any vulnerability that can bypass authentication or role assignment and can lead to shared password leakage.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.1.27.0 (включая)
cpe:2.3:a:teampass:teampass:*:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.00338
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-522
Связанные уязвимости
CVSS3: 9.8
debian
около 7 лет назад
TeamPass version 2.1.27 and earlier contains a Storing Passwords in a ...
CVSS3: 9.8
github
больше 3 лет назад
TeamPass Storing Passwords in a Recoverable Format vulnerability
EPSS
Процентиль: 56%
0.00338
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-522