PT-2018-12672

Name of the Vulnerable Software and Affected Versions Drobo 5N2 NAS version 4.0.5-13.28.96115 Description The issue is related to incorrect access control in the "/mysql/api/logfile.php" endpoint, which allows unauthenticated attackers to retrieve MySQL log files. This is achieved by manipulating...

CVE-2018-14700: Insertion of Sensitive Information into Log File

Incorrect access control in the /mysql/api/logfile.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve MySQL log files via the "name" URL parameter...