Medium · 5.8 CVE-2021-34812 EUVD-2021-21459GHSA-w3f5-2mqc-5c62

Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensi…

Published Jun 18, 2021 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Synology Calendar

Description

Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology Calendar	unspecified – < 2.4.0-0761	2.4.0-0761

References

https://www.synology.com/security/advisory/Synology_SA_21_12