CVE-2022-27620

🗓️ 03 Aug 2022 02:55:10Reported by synologyType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 66 Views

Improper limitation of a pathname to a restricted directory vulnerability in Synology SSO Server

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-27620	2 Aug 202216:19	–	attackerkb
Circl	CVE-2022-27620	3 Aug 202207:18	–	circl
CNNVD	Synology SSO Server 路径遍历漏洞	3 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-27620	3 Aug 202202:55	–	cvelist
EUVD	EUVD-2022-32121	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Synology products	3 Aug 202200:00	–	ncsc
NVD	CVE-2022-27620	3 Aug 202203:15	–	nvd
Prion	Path traversal	3 Aug 202203:15	–	prion
Positive Technologies	PT-2022-18526 · Synology · Synology Sso Server	3 Aug 202200:00	–	ptsecurity

NVD

Node

synology sso_serverRange<2.2.3-0331

AND

synology diskstation_managerMatch6.2

synology diskstation_managerMatch7.0

synology diskstation_managerMatch7.1

[
  {
    "product": "SSO Server",
    "vendor": "Synology",
    "versions": [
      {
        "lessThan": "2.2.3-0331",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]