Medium · 6.3 CVE-2018-8916 EUVD-2018-20524GHSA-4xw8-rvqf-qchf

Unverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authentica…

Published Jun 8, 2018 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: DiskStation Manager (DSM)

Description

Unverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authenticated users to reset password without verification.

Affected products

Vendor	Product	Affected	Fixed
Synology	DiskStation Manager (DSM)	unspecified – < 6.2-23739	6.2-23739

References

https://www.synology.com/en-global/support/security/Synology_SA_18_24