CVE-2017-16766CWE-284

An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 allows local users…

published December 22, 2017

CVSS
—
EPSS
1%
Percentile
53.9
In the wild
Unconfirmed
What it is

An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 allows local users to inject arbitrary web script or HTML via the -fn option.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00743 · 53.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2017-12-22T14:00Z
EPSS history
Timeline
  • 22 DEC 14:00Z
    An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 allows local users…
    cvelistv5