Lucene search
Veracode Vulnerability DatabaseVERACODE:39911HistoryMar 23, 2023 - 12:27 a.m.
Improper Authorization
2023-03-2300:27:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
improper authorization
vulnerable
insecure direct object references
user id
admin
logout
0.001 Low
EPSS
Percentile
32.6%
nilsteampassnet/teampass is vulnerable to Improper Authorization. The vulnerability allows an attacker with low-level privileges to logout everyone out including the admin due to an Insecure Direct Object References (IDOR) via the user ID.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nilsteampassnet/teampass | le | 3.0.0.11 | |
| nilsteampassnet/teampass | le | 3.0.0.11 |
Related
osv
osv
Improper Authorization in nilsteampassnet/teampass
2023-03-17 12:30:40
CVE-2023-1463
2023-03-17 12:15:11
cve
cve
CVE-2023-1463
2023-03-17 12:15:11
huntr
huntr
IDOR Vulnerability Allow Low-Level User Logout Everyone Includes Admin
2023-02-28 07:46:06
github
github
Improper Authorization in nilsteampassnet/teampass
2023-03-17 12:30:40
prion
prion
Authorization
2023-03-17 12:15:00
nvd
nvd
CVE-2023-1463
2023-03-17 12:15:11
cvelist
cvelist
openvas
openvas
TeamPass < 3.0.0.23 Multiple Vulnerabilities
2023-03-10 00:00:00