CVE-2017-12080 - AskarLabs CVE Database

CVE-2017-12080

Vendor Synology

Product Photo Station

Weakness CWE-200 · Info exposure

Published December 4, 2017

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An information exposure vulnerability in default HTTP configuration file in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain sensitive system information via .htaccess file.

Key dates

02Disclosure timeline

December 4, 2017 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-12080 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/200.html

Related vulnerabilities

04Related CVE

CVE-2014-2347 AMTELCO miSecure Information Exposure CVE-2023-49283 Test code in published microsoft-graph-core package exposes phpinfo() CVE-2023-29348 Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability CVE-2025-31491 AutoGPT allows leakage of cross-domain cookies and protected headers in requests redirect CVE-2021-41277 GeoJSON URL validation can expose server files and environment variables to unauthorized users

Identifiers

CVE CVE-2017-12080

CWE CWE-200

Affected versions

Vendor Synology

Product Photo Station

Affected before 6.8.1-3458

Vendor Synology

Product Photo Station

Affected before 6.3-2970