CVE-2018-13286

Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager DSM before 6.2-23739-1 allows remote authenticated users to obtain sensitive information via the world readable configuration...

CVE-2018-13287

Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager SRM before 1.1.7-6941-1 allows remote authenticated users to obtain sensitive information via the world readable configuration...

CVE-2018-13287

CVE-2018-13287 refers to an issue in Synology Router Manager (SRM) before 1.1.7-6941-1 where synouser.conf has incorrect default permissions, allowing remote authenticated users to obtain sensitive information via the world-readable configuration. Affected: SRM running before 1.1.7-6941-1; vulner...

PT-2019-8951 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology Diskstation Manager DSM versions prior to 6.2-23739-1 Description: The issue is related to incorrect default permissions in the synouser.conf file, allowing remote authenticated users to obtain sensitive information due to the...