1. Home
  2. CVE Database
  3. CVE-2019-1000001
CRITICAL · 9.8

CVE-2019-1000001

TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side. Th...

Vulnerability Description

TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side. This attack appears to be exploitable via any vulnerability that can bypass authentication or role assignment and can lead to shared password leakage.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
TeampassTeampass<= 2.1.27.0

Related Weaknesses (CWE)

CWE-522

References

FAQ

What is CVE-2019-1000001?

CVE-2019-1000001 is a vulnerability with a CVSS score of 9.8 (CRITICAL). TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side. Th...

How severe is CVE-2019-1000001?

CVE-2019-1000001 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2019-1000001?

Check the references section above for vendor advisories and patch information. Affected products include: Teampass Teampass.