CVE-2019-1000001

N/A

Descricao

TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side. This attack appears to be exploitable via any vulnerability that can bypass authentication or role assignment and can lead to shared password leakage.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado2/4/2019

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

teampass:teampass

Fraquezas (CWE)

CWE-522

Referencias

https://github.com/nilsteampassnet/TeamPass/issues/2495(cve@mitre.org)

https://github.com/nilsteampassnet/TeamPass/issues/2495(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.