Vulnerabilities > CVE-2018-17107 - Unspecified vulnerability in Tgstation13 Tgstation-Server

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

tgstation13

critical

NVD

Published: 2018-09-24

Updated: 2019-10-03

Summary

In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins would be cached, allowing subsequent logins to succeed with any username or password.

Vulnerable Configurations

Part	Description	Count
Application	Tgstation13 Tgstation13 Tgstation Server 3.2.1.0 Tgstation13 Tgstation Server 3.2.1.1 Tgstation13 Tgstation Server 3.2.1.2 Tgstation13 Tgstation Server 3.2.1.3 Tgstation13 Tgstation Server 3.2.1.4 Tgstation13 Tgstation Server 3.2.1.5 Tgstation13 Tgstation Server 3.2.1.6 Tgstation13 Tgstation Server 3.2.1.7 Tgstation13 Tgstation Server 3.2.1.8 Tgstation13 Tgstation Server 3.2.1.9 Tgstation13 Tgstation Server 3.2.1.10 Tgstation13 Tgstation Server 3.2.1.11 Tgstation13 Tgstation Server 3.2.1.12 Tgstation13 Tgstation Server 3.2.1.13 Tgstation13 Tgstation Server 3.2.1.14 Tgstation13 Tgstation Server 3.2.1.15 Tgstation13 Tgstation Server 3.2.2.0 Tgstation13 Tgstation Server 3.2.2.1 Tgstation13 Tgstation Server 3.2.2.2 Tgstation13 Tgstation Server 3.2.2.3 Tgstation13 Tgstation Server 3.2.2.4 Tgstation13 Tgstation Server 3.2.3.0 Tgstation13 Tgstation Server 3.2.3.2 Tgstation13 Tgstation Server 3.2.3.3 Tgstation13 Tgstation Server 3.2.3.4 Tgstation13 Tgstation Server 3.2.3.5 Tgstation13 Tgstation Server 3.2.3.6 Tgstation13 Tgstation Server 3.2.3.7 Tgstation13 Tgstation Server 3.2.3.8 Tgstation13 Tgstation Server 3.2.4.0	30

References

https://github.com/tgstation/tgstation-server/issues/690