CVE-2014-3771

EUVD-2014-3710
TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via the language file path in a (1) request to index.php or (2) "change_user_language" request to sources/main.queries.php.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
Affected Products (NVD)
VendorProductVersion
teampassteampass
𝑥
≤ 2.1.20
teampassteampass
2.1
teampassteampass
2.1.1
teampassteampass
2.1.2
teampassteampass
2.1.3
teampassteampass
2.1.4
teampassteampass
2.1.5
teampassteampass
2.1.10
teampassteampass
2.1.13
teampassteampass
2.1.14
teampassteampass
2.1.15
teampassteampass
2.1.18
teampassteampass
2.1.19
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://teampass.net/installation/2.1.20-released.html
http://www.openwall.com/lists/oss-security/2014/05/18/2
http://www.openwall.com/lists/oss-security/2014/05/19/5
https://github.com/nilsteampassnet/TeamPass/commit/fd549b245c0f639a8d47bf4f74f92c37c053706f
http://teampass.net/installation/2.1.20-released.html
http://www.openwall.com/lists/oss-security/2014/05/18/2
http://www.openwall.com/lists/oss-security/2014/05/19/5
https://github.com/nilsteampassnet/TeamPass/commit/fd549b245c0f639a8d47bf4f74f92c37c053706f