Improper Access Control in TeamPass Affecting User Privileges

CVE-2024-50702

What is CVE-2024-50702?

TeamPass versions prior to 3.1.3.1 exhibit a vulnerability where the system fails to properly verify if the mail_me operation is executed on behalf of an administrator or manager. This oversight can enable unauthorized users to perform administrative actions, compromising the integrity and confidentiality of sensitive data. Organizations utilizing affected versions are advised to update to version 3.1.3.1 or later to mitigate this issue.

References