An authorization bypass vulnerability in sysPass enables authenticated users to perform unauthorized account decryption, compromising sensitive credential storage.

This vulnerability involves an authorization bypass through user-controlled keys (CWE-639) within the PublicLinkController component. It allows an authenticated user to manipulate requests to access or decrypt account information they are not authorized to view.

Given the CVSS score of 7.1, this vulnerability is critical for password management systems like sysPass. Unauthorized decryption of stored accounts leads to a direct compromise of sensitive credentials, which could facilitate lateral movement and further compromise of the organization's broader security posture.

Immediate Action: Upgrade sysPass to a patched version beyond 3.2.11 as recommended by the vendor.

Proactive Monitoring: Review access logs for the PublicLinkController for unusual patterns or access requests originating from unauthorized user accounts.

Compensating Controls: Temporarily restrict access to the PublicLinkController functionality if it is not strictly required for daily operations, and ensure that Web Application Firewall (WAF) rules are configured to monitor for unauthorized parameter tampering.

Public Exploit Available: Unknown.

The urgency of this update cannot be overstated for password management infrastructure. Organizations must apply the vendor-provided patch immediately and conduct a review of audit logs to determine if any unauthorized account access occurred prior to the remediation.