Improper Authentication in FreeTAKServer

2022-03-1200:00:37

Google

osv.dev

0.001 Low

EPSS

Percentile

44.4%

JSON

FreeTAKServer is an open source, lightweight Server for connect TAK clients. An access control issue in the component /ManageRoute/postRoute of FreeTAKServer version 1.9.8 allows unauthenticated attackers to cause a Denial of Service (DoS) via an unusually large amount of created routes, or create unsafe or false routes for legitimate users. There is currently no known workaround. This issue was fixed in version 1.9.8.5.

CPENameOperatorVersion
freetakservereq0.111
freetakservereq1.8.1
freetakservereq0.8.21
freetakservereq0.1.9.8.5
freetakservereq0.1.7.3
freetakservereq1.9.1
freetakservereq0.1.5.7
freetakservereq0.1.5.5
freetakservereq0.8.19.6.2
freetakservereq0.1.2

Name	Operator	Version
freetakserver	eq	0.111
freetakserver	eq	1.8.1
freetakserver	eq	0.8.21
freetakserver	eq	0.1.9.8.5
freetakserver	eq	0.1.7.3
freetakserver	eq	1.9.1
freetakserver	eq	0.1.5.7
freetakserver	eq	0.1.5.5
freetakserver	eq	0.8.19.6.2
freetakserver	eq	0.1.2