NetSight
IP …
medium4.3

CVE-2018-13295

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obt…

Impact

Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter.

Affected products

VendorProductAffected versions
SynologyApplication Service
before 1.5.4-0320

Weakness classification

CWE-200

References