CVE-2018-13294

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter...

CVE-2018-13294

The CVE-2018-13294 vulnerability affects Synology Application Service’s SYNO.Personal.Profile component, prior to version 1.5.4-0320. It allows remote authenticated users to disclose sensitive system information via the uid parameter, indicating an information disclosure flaw likely tied to impro...