CVE-2017-16775CWE-1021

Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct…

High · published April 1, 2019

CVSS v3.0
7.1
EPSS
1%
Percentile
64.5
In the wild
Unconfirmed
What it is

Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01075 · 64.5th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2019-04-01T14:25Z
EPSS history
Timeline
  • 01 APR 14:25Z
    Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0129 allows remote attackers to conduct…
    cvelistv5