CVE-2018-13281
4.3
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Summary
Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows remote authenticated users to determine the existence and obtain the metadata of arbitrary files via the file_path parameter.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Synology | DiskStation Manager (DSM) | unspecified < 6.2-23739-2 | affected |
Weaknesses
- CWE-200: Information Exposure (CWE-200)
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.