Access Control Vulnerability in TeamPass

CVE-2024-50701

What is CVE-2024-50701?

An access control vulnerability exists in TeamPass where the application fails to properly verify a user's permissions for specific folders. When retrieving information about access rights for a folder, the system does not adequately check if the folder belongs to the list of allowed folders defined by an administrator. This could lead to unauthorized access to sensitive information stored within folders that should be restricted, emphasizing the necessity for users to update to the latest version to mitigate potential security risks.

References