High · 8.3 CVE-2018-8919 EUVD-2018-20527GHSA-8937-22rp-f6j9

Information exposure vulnerability in SYNO.Core.Desktop.SessionData in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows remote …

Published Dec 24, 2018 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: DiskStation Manager (DSM)

Description

Information exposure vulnerability in SYNO.Core.Desktop.SessionData in Synology DiskStation Manager (DSM) before 6.1.6-15266 allows remote attackers to steal credentials via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	DiskStation Manager (DSM)	unspecified – < 6.1.6-15266	6.1.6-15266

References

https://www.synology.com/security/advisory/Synology_SA_18_14