CVE-2018-13295: Infoleak
Published Apr 1, 2019
·Updated
Information exposure vulnerability in SYNO.Personal.Application.Info in Synology Application Service before 1.5.4-0320 allows remote authenticated users to obtain sensitive system information via the version parameter.
Affected Software
1 affected component
Synology Application Service<1.5.4-0320
Event History
Apr 1, 2019
CVE Published
via MITRE·02:29 PM
Data Sourced
via MITRE·02:29 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-13295?
CVE-2018-13295 is classified as a Medium severity vulnerability.
2
How do I fix CVE-2018-13295?
To fix CVE-2018-13295, upgrade Synology Application Service to version 1.5.4-0320 or later.
3
What information can be exposed by CVE-2018-13295?
CVE-2018-13295 allows remote authenticated users to access sensitive system information.
4
Who is affected by CVE-2018-13295?
Only users of Synology Application Service versions prior to 1.5.4-0320 are affected by CVE-2018-13295.
5
Is user authentication required to exploit CVE-2018-13295?
Yes, exploitation of CVE-2018-13295 requires remote authenticated user access.