High · 7.7 CVE-2024-29229 EUVD-2024-26243GHSA-vvwv-623p-wcgq

Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 …

Published Mar 28, 2024 · Updated Aug 12, 2024 · Assigned by synology

Vendor: Synology Product: Surveillance Station

Description

Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain sensitive information via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	Surveillance Station	< 9.2.0-9289, < 9.2.0-11289	9.2.0-9289

References

Synology-SA-24:04 Surveillance Station vendor-advisory