Skip to content
OpenAdvisories
Medium · 4.3 CVE-2018-13295 EUVD-2018-5243GHSA-r8m8-266c-22qg

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authen…

Published Apr 1, 2019 · Updated Sep 16, 2024 · Assigned by synology

Description

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter.

Affected products

VendorProductAffectedFixed
Synology Application Service unspecified – < 1.5.4-0320 1.5.4-0320

References