CVE-2017-15053

TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting roles.queries.php. It is then possible for a manager user to modify any arbitrary roles within the application, or delete any arbitrary role. To exploit the vulnerability, an authenticated attacker must have...

CVE-2017-15053: Improper Privilege Management

TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting roles.queries.php. It is then possible for a manager user to modify any arbitrary roles within the application, or delete any arbitrary role. To exploit the vulnerability, an authenticated attacker must have...

PT-2017-13838

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9 Description The issue allows a manager user to modify or delete any arbitrary roles within the application due to improper access control enforcement when requesting roles.queries.php. To exploit this, an...