EUVD-2019-3486

Malware in sbrugna...

Information disclosure

Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline...

CVE-2019-11820

Synology Calendar prior to 2.3.3-0620 contains an information exposure via the process environment that allows local users to obtain credentials through the command line. Affected product: Synology Calendar. Vulnerable item: process/environment handling leading to credential leakage. Impact: cred...