Medium · 4.3 CVE-2018-13294 EUVD-2018-5242GHSA-w7p7-785g-qr7h

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated u…

Published Apr 1, 2019 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Application Service

Description

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter.

Affected products

Vendor	Product	Affected	Fixed
Synology	Application Service	unspecified – < 1.5.4-0320	1.5.4-0320

References

https://www.synology.com/security/advisory/Synology_SA_18_40