CVE-2018-12296

2019-05-13T13:29:00
ID CVE-2018-12296
Type cve
Reporter cve@mitre.org
Modified 2019-10-03T00:03:00

Description

Insufficient access control in /api/external/7.0/system.System.get_infos in Seagate NAS OS version 4.3.15.1 allows attackers to obtain information about the NAS without authentication via empty POST requests.