ByteOS Network

NVD Vulnerability Details :

CVE-2024-50703

Analyzed

More Info Official Page

Source-cve@mitre.org

Published At-30 Dec, 2024 | 15:15

Updated At-29 Sep, 2025 | 17:50

TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	5.4	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Primary	3.1	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Type: Secondary

Version: 3.1

Base score: 5.4

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Type: Primary

Version: 3.1

Base score: 8.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CPE Matches

teampass>>teampass>>Versions before 3.1.3.1(exclusive)

cpe:2.3:a:teampass:teampass:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-472	Secondary	cve@mitre.org

CWE ID: CWE-472

Type: Secondary

Source: cve@mitre.org

References

Hyperlink	Source	Resource
https://github.com/nilsteampassnet/TeamPass/commit/c7f7f809071eaa9e04505ee79cec7049a42959e9	cve@mitre.org	Patch
https://github.com/nilsteampassnet/TeamPass/compare/3.1.2...3.1.3.1	cve@mitre.org	Product
https://github.com/nilsteampassnet/TeamPass/compare/3.1.3...3.1.3.1	cve@mitre.org	Product

Hyperlink: https://github.com/nilsteampassnet/TeamPass/commit/c7f7f809071eaa9e04505ee79cec7049a42959e9

Source: cve@mitre.org

Resource:

Patch

Hyperlink: https://github.com/nilsteampassnet/TeamPass/compare/3.1.2...3.1.3.1

Source: cve@mitre.org

Resource:

Product

Hyperlink: https://github.com/nilsteampassnet/TeamPass/compare/3.1.3...3.1.3.1

Source: cve@mitre.org

Resource:

Product

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History