Skip to content
OpenAdvisories
Medium · 6.5 CVE-2018-13287 EUVD-2018-5235GHSA-qfhf-9ghp-mgv4

Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticat…

Published Apr 1, 2019 · Updated Sep 16, 2024 · Assigned by synology

Description

Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to obtain sensitive information via the world readable configuration.

Affected products

VendorProductAffectedFixed
Synology Synology Router Manager (SRM) unspecified – < 1.1.7-6941-1 1.1.7-6941-1

References