CVE-2017-15891

2017-11-1000:00:00

CWE-284

synology

www.cve.org

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.4%

JSON

Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authenticated users to modify calendar event via unspecified vectors.

CNA Affected

[
  {
    "product": "Synology Calendar",
    "vendor": "Synology",
    "versions": [
      {
        "status": "affected",
        "version": "before 2.0.1-0242"
      }
    ]
  }
]

References

www.synology.com/en-global/support/security/Synology_SA_17_68_Calendar