CVE-2017-15887

CVE-2017-15887

Vendor Synology
Product Synology CardDAV Server
Weakness CWE-307 · Brute force
Published November 7, 2017
Last update September 16, 2024

CVSS base score

What the vulnerability does

01Description

An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack.

Key dates

02Disclosure timeline

November 7, 2017 CVE published
September 16, 2024 Record updated