CVE-2018-13352

TerraMaster TOS (web app) version 3.1.03 is affected by CVE-2018-13352, enabling attackers to view active session tokens due to a session exposed in a world-readable directory. The issue is documented across multiple entries (NVD and CNVD) with a consistent description of session disclosure via i...

CVE-2018-13352

Session Exposure in the web application for TerraMaster TOS version 3.1.03 allows attackers to view active session tokens in a world-readable directory...