CVE-2018-13291
CVSS 3.0 Score 4.3 of 10 (medium)
Details
Published Apr 1, 2019
Updated: Jan 14, 2025
CWE ID 200
Summary
CVE-2018-13291 is an information exposure vulnerability affecting Synology DiskStation Manager (DSM) versions prior to 6.2.1-23824. This vulnerability allows remote authenticated users to access sensitive information because of a world-readable configuration file located at /usr/syno/etc/mount.conf. The file contains details that could be exploited to gain insight into the system's internal workings or potentially compromise other components, posing a significant risk to the security of the DSM environment.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- DiskStation Manager
Affected Vendors
- Synology