CVE-2018-13286: Medium severity synology photos diskstation manager vulnerability
Published Apr 1, 2019
·Updated
Incorrect default permissions vulnerability in synouser.conf in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to obtain sensitive information via the world readable configuration.
Affected Software
8 affected components
Synology Diskstation Manager>=5.2<5.2-5967-8
Synology Diskstation Manager>=6.0<6.0.3-8754-8
Synology Diskstation Manager>=6.1<6.1.7-15284-1
Synology Diskstation Manager>=6.2<6.2-23739-1
Synology Diskstation Manager>=5.2<5.2-5967-8
Synology Diskstation Manager>=6.0<6.0.3-8754-8
Synology Diskstation Manager>=6.1<6.1.7-15284-1
Synology Diskstation Manager>=6.2<6.2-23739-1
Event History
Apr 1, 2019
CVE Published
via MITRE·02:26 PM
Data Sourced
via MITRE·02:26 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-13286?
CVE-2018-13286 has a medium severity rating due to its potential impact on sensitive information disclosure.
2
How do I fix CVE-2018-13286?
To fix CVE-2018-13286, update your Synology Diskstation Manager to version 6.2-23739-1 or later.
3
Who is affected by CVE-2018-13286?
CVE-2018-13286 affects all versions of Synology Diskstation Manager prior to 6.2-23739-1.
4
What type of vulnerability is CVE-2018-13286?
CVE-2018-13286 is an incorrect default permissions vulnerability that allows unauthorized access to configuration files.
5
Can CVE-2018-13286 be exploited remotely?
Yes, CVE-2018-13286 can be exploited by remote authenticated users to gain access to sensitive information.