CVE-2018-13286

CVSS 3.0 Score 6.5 of 10 (medium)

Details

Published Apr 1, 2019
Updated: Jan 14, 2025
CWE ID 276

Summary

CVE-2018-13286 is a vulnerability affecting Synology Diskstation Manager (DSM) versions prior to 6.2-23739-1. This issue arises due to incorrect default permissions in the synouser.conf file. Exploitation allows remote, authenticated users to access sensitive information from the world readable configuration, potentially leading to privacy breaches or further unauthorized actions.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • DiskStation Manager

Affected Vendors

  • Synology

Advisories, Assessments, and Mitigations