CVE-2024-50701

Katalog CVE

CVSS 4.3 · Medium EPSS 0,34%

Kerentanan Incorrect Privilege Assignment pada teampass. Skor CVSS 3.1 4.3 (Medium) menurut mitre.org.

Deskripsi (NVD)

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin.

Rincian

Terbit di NVD

30 Desember 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber mitre.org
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-266: Incorrect Privilege Assignment

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/nilsteampassnet/TeamPass/commit/ddbb2d3d94085dced50c4936fd2215af88e4a88d patch
• https://github.com/nilsteampassnet/TeamPass/compare/3.1.2...3.1.3.1 product
• https://github.com/nilsteampassnet/TeamPass/compare/3.1.3...3.1.3.1 product