What’s Vulnerable › Vulnerabilities

CVE-2017-15052

• Severity: medium (CVSS 4.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-11-27 · updated 2026-06-17
• Weakness: CWE-269

Description

TeamPass before 2.1.27.9 does not properly enforce manager access control when requesting users.queries.php. It is then possible for a manager user to delete an arbitrary user (including admin), or modify attributes of any arbitrary user except administrator. To exploit the vulnerability, an authenticated attacker must have the manager rights on the application, then tamper with the requests sent directly, for example by changing the "id" parameter when invoking "delete_user" on users.queries.php.

Affected products

• nilsteampassnet/teampass: before 2.1.27.9 — fixed in 2.1.27.9

How to fix

Upgrade to a fixed version: nilsteampassnet/teampass 2.1.27.9. Check the vendor advisory for mitigations.

References

• http://blog.amossys.fr/teampass-multiple-cve-01.html
• https://github.com/nilsteampassnet/TeamPass/commit/8f2d51dd6c24f76e4f259d0df22cff9b275f2dd1
• http://blog.amossys.fr/teampass-multiple-cve-01.html
• https://github.com/nilsteampassnet/TeamPass/commit/8f2d51dd6c24f76e4f259d0df22cff9b275f2dd1

Get alerted when CVE-2017-15052 or the next vulnerability affects your stack