CVE-2014-3772
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a direct request to a file that calls the session_start function before checking the CPM key, as demonstrated by a request to sources/upload/upload.files.php.
TeamPass anterior a 2.1.20 permite a atacantes remotos evadir las restricciones de acceso a través de una solicitud en index.php seguida por una solicitud directa en un fichero que llama la función session_start antes de comprobar la clave CPM, tal y como fue demostrado por una solicitud en sources/upload/upload.files.php.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-05-19 CVE Reserved
- 2014-08-07 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2014/05/18/2 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2014/05/19/5 | Mailing List |
|
| URL | Date | SRC |
|---|---|---|
| https://github.com/nilsteampassnet/TeamPass/commit/7715512f2bd5659cc69e063a1c513c19e384340f | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://teampass.net/installation/2.1.20-released.html | 2014-08-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Teampass Search vendor "Teampass" | Teampass Search vendor "Teampass" for product "Teampass" | <= 2.1.20 Search vendor "Teampass" for product "Teampass" and version " <= 2.1.20" | beta |
Affected
| ||||||
| Teampass Search vendor "Teampass" | Teampass Search vendor "Teampass" for product "Teampass" | 2.1 Search vendor "Teampass" for product "Teampass" and version "2.1" | - |
Affected
| ||||||
| Teampass Search vendor "Teampass" | Teampass Search vendor "Teampass" for product "Teampass" | 2.1.1 Search vendor "Teampass" for product "Teampass" and version "2.1.1" | - |
Affected
| ||||||
| Teampass Search vendor "Teampass" | Teampass Search vendor "Teampass" for product "Teampass" | 2.1.2 Search vendor "Teampass" for product "Teampass" and version "2.1.2" | - |
Affected
| ||||||
| Teampass Search vendor "Teampass" | Teampass Search vendor "Teampass" for product "Teampass" | 2.1.3 Search vendor "Teampass" for product "Teampass" and version "2.1.3" | - |
Affected
| ||||||
| Teampass Search vendor "Teampass" | Teampass Search vendor "Teampass" for product "Teampass" | 2.1.4 Search vendor "Teampass" for product "Teampass" and version "2.1.4" | - |
Affected
| ||||||
| Teampass Search vendor "Teampass" | Teampass Search vendor "Teampass" for product "Teampass" | 2.1.5 Search vendor "Teampass" for product "Teampass" and version "2.1.5" | - |
Affected
| ||||||
| Teampass Search vendor "Teampass" | Teampass Search vendor "Teampass" for product "Teampass" | 2.1.10 Search vendor "Teampass" for product "Teampass" and version "2.1.10" | - |
Affected
| ||||||
| Teampass Search vendor "Teampass" | Teampass Search vendor "Teampass" for product "Teampass" | 2.1.13 Search vendor "Teampass" for product "Teampass" and version "2.1.13" | - |
Affected
| ||||||
| Teampass Search vendor "Teampass" | Teampass Search vendor "Teampass" for product "Teampass" | 2.1.14 Search vendor "Teampass" for product "Teampass" and version "2.1.14" | - |
Affected
| ||||||
| Teampass Search vendor "Teampass" | Teampass Search vendor "Teampass" for product "Teampass" | 2.1.15 Search vendor "Teampass" for product "Teampass" and version "2.1.15" | - |
Affected
| ||||||
| Teampass Search vendor "Teampass" | Teampass Search vendor "Teampass" for product "Teampass" | 2.1.18 Search vendor "Teampass" for product "Teampass" and version "2.1.18" | - |
Affected
| ||||||
| Teampass Search vendor "Teampass" | Teampass Search vendor "Teampass" for product "Teampass" | 2.1.19 Search vendor "Teampass" for product "Teampass" and version "2.1.19" | - |
Affected
| ||||||