5 matches found
CVE-2018-13290
Synology SRM 1.1.x is affected by CVE-2018-13290 (Information exposure via SYNO.Core.ACL). Affected: Synology Router Manager (SRM) before 1.1.7-6941-2. Issue: remote authenticated users can determine file existence or access sensitive file information via the file_path parameter. CVSS metrics ind...
CVE-2018-13290: Exposure of Sensitive Information to an Unauthorized Actor
Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager SRM before 1.1.7-6941-2 allows remote authenticated users to determine the existence of files or obtain sensitive information of files via the filepath parameter...
CVE-2018-13281
Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager DSM before 6.2-23739-2 allows remote authenticated users to determine the existence and obtain the metadata of arbitrary files via the filepath parameter...
CVE-2018-13281
The CVE-2018-13281 entry affects Synology DiskStation Manager (DSM) prior to 6.2-23739-2, specifically the SYNO.Core.ACL component. The vulnerability allows remote authenticated users to determine the existence of files and obtain their metadata via the file_path parameter, constituting an inform...
CVE-2018-13281: Exposure of Sensitive Information to an Unauthorized Actor
Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager DSM before 6.2-23739-2 allows remote authenticated users to determine the existence and obtain the metadata of arbitrary files via the filepath parameter...