PT-2018-12672

Name of the Vulnerable Software and Affected Versions Drobo 5N2 NAS version 4.0.5-13.28.96115 Description The issue is related to incorrect access control in the "/mysql/api/logfile.php" endpoint, which allows unauthenticated attackers to retrieve MySQL log files. This is achieved by manipulating...