CVE-2014-3772

TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a direct request to a file that calls the…

published August 7, 2014

CVSS
—
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a direct request to a file that calls the session_start function before checking the CPM key, as demonstrated by a request to sources/upload/upload.files.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02646 · 85.5th percentile
Published
2014-08-07T10:00Z
EPSS history
Timeline
  • 07 AUG 10:00Z
    TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a direct request to a file that calls the…
    cvelistv5