Improper access control

2017-12-2214:29:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.4%

JSON

An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 allows local users to inject arbitrary web script or HTML via the -fn option.

CPENameOperatorVersion
diskstation_managerge6.1.0
diskstation_managerlt6.1.4
diskstation_managerge6.0.0
diskstation_managerlt6.0.3

Name	Operator	Version
diskstation_manager	ge	6.1.0
diskstation_manager	lt	6.1.4
diskstation_manager	ge	6.0.0
diskstation_manager	lt	6.0.3

References

www.synology.com/en-global/support/security/Synology_SA_17_74