Description
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenable | ASUSTOR Data Master | 3.1.5 and below | — |
Unscored
CVE-2018-15696
EUVD-2018-7566GHSA-9f38-jj5w-25cg
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi.
Published Aug 27, 2018 · Updated Sep 16, 2024 · Assigned by tenable