CVE-2018-17107

2018-09-2422:29:01

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

JSON

In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins would be cached, allowing subsequent logins to succeed with any username or password.

CPENameOperatorVersion
tgstation-servereqtgstation-server-v3.2.1.8
tgstation-servereqtgstation-server-v3.2.2.4
tgstation-servereqtgstation-server-v3.2.1.6
tgstation-servereqtgstation-server-v3.2.3.0
tgstation-servereqtgstation-server-v3.2.1.12
tgstation-servereqtgstation-server-v3.2.3.7
tgstation-servereqtgstation-server-v3.2.1.13
tgstation-servereqtgstation-server-v3.2.2.3
tgstation-servereqtgstation-server-v3.2.3.3
tgstation-servereqtgstation-server-v3.2.1.5

Name	Operator	Version
tgstation-server	eq	tgstation-server-v3.2.1.8
tgstation-server	eq	tgstation-server-v3.2.2.4
tgstation-server	eq	tgstation-server-v3.2.1.6
tgstation-server	eq	tgstation-server-v3.2.3.0
tgstation-server	eq	tgstation-server-v3.2.1.12
tgstation-server	eq	tgstation-server-v3.2.3.7
tgstation-server	eq	tgstation-server-v3.2.1.13
tgstation-server	eq	tgstation-server-v3.2.2.3
tgstation-server	eq	tgstation-server-v3.2.3.3
tgstation-server	eq	tgstation-server-v3.2.1.5