2018-10-31 17:29:00 2019-10-10 01:34:18

Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows remote authenticated users to determine the existence and obtain the metadata of arbitrary files via the file_path parameter.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE
Synology Diskstation manager 6.1 (not an official CPE) Synology Diskstation manager 6.0 (not an official CPE) Synology Diskstation manager 5.2 (not an official CPE) Synology Diskstation manager 6.1-15047 (not an official CPE) Synology Diskstation manager 6.1-15047-1 (not an official CPE) Synology Diskstation manager 6.1-15047-2 (not an official CPE) Synology Diskstation manager 6.1.1 (not an official CPE) Synology Diskstation manager 6.1.1-15101 (not an official CPE) Synology Diskstation manager 6.1.1-15101-1 (not an official CPE) Synology Diskstation manager 6.1.1-15101-2 (not an official CPE) Synology Diskstation manager 6.1.1-15101-3 (not an official CPE) Synology Diskstation manager 6.1.1-15101-4 (not an official CPE) Synology Diskstation manager 6.1.2-15132 (not an official CPE) Synology Diskstation manager 6.1.2-15132-1 (not an official CPE) Synology Diskstation manager 6.1.3-15152 (not an official CPE) Synology Diskstation manager 6.1.3-15152-1 (not an official CPE) Synology Diskstation manager 6.1.3-15152-3 (not an official CPE) Synology Diskstation manager 6.1.3-15152-4 (not an official CPE) Synology Diskstation manager 6.1.3-15152-5 (not an official CPE) Synology Diskstation manager 6.1.3-15152-6 (not an official CPE) Synology Diskstation manager 6.1.3-15152-7 (not an official CPE) Synology Diskstation manager 6.1.3-15152-8 (not an official CPE) Synology Diskstation manager 6.1.4-15217 (not an official CPE) Synology Diskstation manager 6.1.4-15217-1 (not an official CPE) Synology Diskstation manager 6.1.4-15217-2 (not an official CPE) Synology Diskstation manager 6.1.4-15217-3 (not an official CPE) Synology Diskstation manager 6.1.4-15217-4 (not an official CPE) Synology Diskstation manager 6.1.4-15217-5 (not an official CPE) Synology Diskstation manager 6.1.6-15266 (not an official CPE) Synology Diskstation manager 6.1.7-15284 (not an official CPE) Synology Diskstation manager 6.1.7-15284-1 (not an official CPE) Synology Diskstation manager 6.2 (not an official CPE) Synology Diskstation manager 6.2-23739 (not an official CPE) Synology Diskstation manager 6.2-23739-1 (not an official CPE) Synology Skynas - (not an official CPE) Synology Vs960hd - (not an official CPE)