Authorization

2018-07-0513:29:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.7%

JSON

Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote authenticated users to bypass permission checks for directories in POSIX mode.

CPENameOperatorVersion
universal_searcheq< 1.0.5-135

CPE	Name	Operator	Version
	universal_search	eq	< 1.0.5-135

References

www.synology.com/en-global/support/security/Synology_SA_18_27