← Back

CVE-2018-13281

nvd nist
Published: Oct 31, 2018Modified: Jan 14, 2025

JSON object

Loading...
4.3
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows remote authenticated users to determine the existence and obtain the metadata of arbitrary files via the file_path parameter.

Affected (6)

Synology
3 products
Diskstation Manager
Skynas
Vs960hd
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Synology
Diskstation Manager
From 6.1 to 6.1.7-15284-2
Diskstation Manager
From 6.2 to 6.2-23739-2
Diskstation Manager
Version 5.2
Diskstation Manager
Version 6.0
Skynas
All versions
Vs960hd
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: security@synology.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.