CVE-2019-1000001

CRITICAL

TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side....

Affects 1 product across 1 vendor.

CVSS 3.09.8
EPSS1.7%
Percentile77th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-522: CWE-522
Related Attack Patterns (CAPEC)
CAPEC-102 Session Sidejacking
via CWE-522
CAPEC-474 Signature Spoofing by Key Theft
via CWE-522
CAPEC-509 Kerberoasting
via CWE-522
CAPEC-551 Modify Existing Service
via CWE-522
CAPEC-561 Windows Admin Shares with Stolen Credentials
via CWE-522
Show all 13

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2019. A critical vulnerability affects Teampass systems (CVE-2019-1000001). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2019-GLOBAL-132865-C • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2019-1000001?
This vulnerability was disclosed in 2019. A critical vulnerability affects Teampass systems (CVE-2019-1000001). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2019-1000001?
CVE-2019-1000001 has CVSS 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 1.7%.
Is CVE-2019-1000001 actively exploited?
No confirmed active exploitation of CVE-2019-1000001 as of 2026-05-30.
How do I remediate CVE-2019-1000001?
Priority: MEDIUM.
What systems are affected by CVE-2019-1000001?
CVE-2019-1000001 affects Teampass Teampass.
Vulnerability Details
CVE IDCVE-2019-1000001
BSIDBS-2019-GLOBAL-132865-C BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2019-02-04
Last Modified2024-11-21
ICS Relevance0%
Weakness (CWE)
CWE-522
SourceNVD
Official Description

TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side. This attack appears to be exploitable via any vulnerability that can bypass authentication or role assignment and can lead to shared password leakage.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side. This attack appears to be exploitable via any vulnerability that can bypass authentication or role assignment and can lead to shared password leakage. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Exploitation Likelihood: LOW

Affected Products
VendorProductAffected Versions
Teampass Teampass ≤ 2.1.27.0
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2810 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash12a4081a691fc53adb974e33d806f18dad44504f32c9097272d189b55636b412e0c2ab5616ae058ab97915ac7e8f4a28cca04e4c419fb5e0b75d813fe5d0163c
Related CVEs affecting Teampass
CVE-2017-9436 9.8 TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php. CVE-2015-7564 9.8 Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow r... CVE-2023-3086 9.0 Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/team... CVE-2020-12479 8.8 TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP fi... CVE-2015-7563 8.8 Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlie...
View all Teampass CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →