CVE-2020-11671

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Lack of authorization controls in REST API functions in TeamPass through 2.1.27.36 allows any TeamPass user with a valid API token to become a TeamPass administrator and read/modify all passwords via authenticated api/index.php REST API calls. NOTE: the API is not available by default.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-862

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/nilsteampassnet/TeamPass/issues/2765Exploit, Issue Tracking, Third Party Advisory
https://github.com/nilsteampassnet/TeamPass/issues/2765Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: May 4, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-116739.8An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., del CVE-2020-116748.8Cerner medico 26.00 allows variable reuse, possibly causing data corruption.CVE-2020-116758.8Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3).CVE-2020-116768.8Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3).CVE-2020-116778.8Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3).CVE-2020-116798.8Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionality. Adminstrator/User CVE-2020-116806.5Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality. The application fails to check that a re CVE-2020-116818.1Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext. Low privileged users can exploit this CVE-2020-116826.5Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request. A __RequestVerificationToken is set by the web interface, and CVE-2020-116836.8A timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by attackers with physical access to forge CMAC valu CVE-2020-116849.1AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passing control to a less privileged CVE-2020-116857.5In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.