Medium · 5.5 CVE-2019-11820 EUVD-2019-3486GHSA-h7q5-jggm-p2vj

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credenti…

Published May 9, 2019 · Updated Sep 16, 2024 · Assigned by synology

Description

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline.

Affected products

Vendor	Product	Affected	Fixed
Synology	Calendar	unspecified – < 2.3.3-0620	2.3.3-0620

References

https://www.synology.com/security/advisory/Synology_SA_19_21