CVE-2015-2851

2015-05-3019:00:00

certcc

www.cve.org

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename.

References

www.kb.cert.org/vuls/id/551972

www.kb.cert.org/vuls/id/BLUU-9VBU45

www.securityfocus.com/bid/74826