CVE-2020-12478

EUVD-2022-3095
TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. This may include backups or LDAP debug files.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
Affected Products (NVD)
VendorProductVersion
teampassteampass
2.1.27.36
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/nilsteampassnet/TeamPass/issues/2764
https://github.com/nilsteampassnet/TeamPass/issues/2764