Information disclosure

2019-05-0906:29:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline.

CPENameOperatorVersion
calendareq< 2.3.3-620

CPE	Name	Operator	Version
	calendar	eq	< 2.3.3-620

References

www.synology.com/security/advisory/Synology_SA_19_21