CVE-2017-15891

Summary

Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authenticated users to modify calendar event via unspecified vectors.

Affected Software

VendorProductVersion RangeStatus
SynologySynology Calendarbefore 2.0.1-0242affected

Weaknesses

  • CWE-284: Improper Access Control (CWE-284)

ADP Enrichment

CVE Program Container

Additional References

References