Skip to content
OpenAdvisories
Medium · 6.5 CVE-2018-13286 EUVD-2018-5234GHSA-5hf6-8rwq-jj93

Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authent…

Published Apr 1, 2019 · Updated Sep 17, 2024 · Assigned by synology

Description

Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to obtain sensitive information via the world readable configuration.

Affected products

VendorProductAffectedFixed
Synology DiskStation Manager (DSM) unspecified – < 6.2-23739-1 6.2-23739-1

References