medium4.3
CVE-2018-13281
Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows remote authenticated users to determine the…
Impact
Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows remote authenticated users to determine the existence and obtain the metadata of arbitrary files via the file_path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synology | Skynas | All versions |
| Synology | Vs960hd | All versions |
| Synology | Diskstation Manager | from 6.1 before 6.1.7-15284-2 from 6.2 before 6.2-23739-2 Versions 5.2, 6.0 |