CVE-2018-13286: Medium severity Synology Diskstation Manager vulnerability
Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to obtain sensitive information via the world readable configuration.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Synology DiskStation Manager (DSM)to a version that resolves this vulnerability.Fixed in 6.2-23739-1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13286?
CVE-2018-13286 has a medium severity rating due to its potential impact on sensitive information disclosure.
How do I fix CVE-2018-13286?
To fix CVE-2018-13286, update your Synology Diskstation Manager to version 6.2-23739-1 or later.
Who is affected by CVE-2018-13286?
CVE-2018-13286 affects all versions of Synology Diskstation Manager prior to 6.2-23739-1.
What type of vulnerability is CVE-2018-13286?
CVE-2018-13286 is an incorrect default permissions vulnerability that allows unauthorized access to configuration files.
Can CVE-2018-13286 be exploited remotely?
Yes, CVE-2018-13286 can be exploited by remote authenticated users to gain access to sensitive information.