Design/Logic Flaw

2018-09-2422:29:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

JSON

In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins would be cached, allowing subsequent logins to succeed with any username or password.

CPENameOperatorVersion
tgstation-serverge3.2.1.0
tgstation-serverlt3.2.5.0

CPE	Name	Operator	Version
	tgstation-server	ge	3.2.1.0
	tgstation-server	lt	3.2.5.0

References

github.com/tgstation/tgstation-server/issues/690