NetSight
IP …
medium4.3

CVE-2018-13294

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensi…

Impact

Information exposure vulnerability in SYNO.Personal.Profile in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the uid parameter.

Affected products

VendorProductAffected versions
SynologyApplication Service
before 1.5.4-0320

Weakness classification

CWE-200

References