Medium · 6.5 CVE-2017-16773 EUVD-2017-7952GHSA-564f-j4mm-773m

Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote authenticated users …

Published Jul 5, 2018 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Universal Search

Description

Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote authenticated users to bypass permission checks for directories in POSIX mode.

Affected products

Vendor	Product	Affected	Fixed
Synology	Universal Search	unspecified – < 1.0.5-0135	1.0.5-0135

References

https://www.synology.com/en-global/support/security/Synology_SA_18_27