CVE-2020-16136
Last modified
CVE-2020-16136 is a high-severity vulnerability rated 7.7/10 on the CVSS scale. In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory traversal ../ sequences in /Administration/Logs/ requests. The attacker is unable to enumerate files, however.. EPSS estimates a 2.06% chance of exploitation in the next 30 days.
Description
In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory traversal ../ sequences in /Administration/Logs/ requests. The attacker is unable to enumerate files, however.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tgstation13 | Tgstation-Server | 4.4.0 |
| Tgstation13 | Tgstation-Server | 4.4.1 |
References
- https://github.com/tgstation/tgstation-serverThird Party Advisory
- https://github.com/tgstation/tgstation-serverThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-16136?
How severe is CVE-2020-16136?
How do I fix CVE-2020-16136?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-16128The aptdaemon DBus interface disclosed file existence disclo…3.8
- CVE-2020-1613A vulnerability in the BGP FlowSpec implementation may cause…7.5
- CVE-2020-16131Tiki before 21.2 allows XSS because [\s\/"\'] is not properl…6.1
- CVE-2020-16132Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-16134An issue was discovered on Swisscom Internet Box 2, Internet…8
- CVE-2020-16135libssh 0.9.4 has a NULL pointer dereference in tftpserver.c …5.9
- CVE-2020-16137A privilege escalation issue in Cisco Unified IP Conference …9.8
- CVE-2020-16138A denial-of-service issue in Cisco Unified IP Conference Sta…7.5
- CVE-2020-16139A denial-of-service in Cisco Unified IP Conference Station 7…7.5
- CVE-2020-1614A Use of Hard-coded Credentials vulnerability exists in the …10
- CVE-2020-16140The search functionality of the Greenmart theme 2.4.2 for Wo…6.1
- CVE-2020-16142On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehic…3.5
Are you affected by CVE-2020-16136?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST