medium6.5
CVE-2018-13286
Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to obta…
Impact
Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to obtain sensitive information via the world readable configuration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synology | Diskstation Manager | from 5.2 before 5.2-5967-8 from 6.0 before 6.0.3-8754-8 from 6.1 before 6.1.7-15284-1 from 6.2 before 6.2-23739-1 |