CVE-2018-13281

CVSS 3.0 Score 4.3 of 10 (medium)

Details

Published Oct 31, 2018
Updated: Jan 14, 2025
CWE ID 200

Summary

CVE-2018-13281 is an information exposure vulnerability affecting Synology DiskStation Manager (DSM) prior to version 6.2-23739-2. This issue resides in SYNO.Core.ACL and permits remote, authenticated users to ascertain the existence of arbitrary files and retrieve their metadata through manipulation of the file_path parameter. This vulnerability poses a significant risk for unauthorized data access and should be promptly addressed by system administrators.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • DiskStation Manager

Affected Vendors

  • Synology

Advisories, Assessments, and Mitigations