Skip to content
OpenAdvisories
High · 7.5 CVE-2024-4464 EUVD-2024-44559GHSA-6p5p-h4hf-rf37

Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4-2680, 2.0.5-3152 an…

Published Dec 18, 2024 · Updated Dec 18, 2024 · Assigned by synology

Vendor: Synology Product: Media Server

Description

Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4-2680, 2.0.5-3152 and 2.2.0-3325 allows remote attackers to read specific files via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Media Server < 2.0.5-3152, < 2.2.0-3325, < 1.4-2680 2.0.5-3152

References