CVE-2017-16770 - AskarLabs CVE Database

CVE-2017-16770

Vendor Synology

Product Surveillance Station

Weakness CWE-538

Published February 27, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter.

Key dates

02Disclosure timeline

February 27, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-16770 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/538.html