CVE-2018-13291 MEDIUM

CVE-2018-13291

Vendor Synology
Product DiskStation Manager (DSM)
Weakness CWE-200 · Info exposure
Published April 1, 2019
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to obtain sensitive information via the world readable configuration.

Key dates

02Disclosure timeline

April 1, 2019 CVE published
September 16, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-4228 SourceCodester Book Store Management System information disclosure CVE-2026-12620 Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server CVE-2021-3031 PAN-OS: Information exposure in Ethernet data frame construction (Etherleak) CVE-2020-3360 Cisco IP Phones Series 7800 and Series 8800 Call Log Information Disclosure Vulnerability CVE-2026-9183 24liveblog <= 2.2 - Authenticated (Contributor+) Exposure of Sensitive Information via Block Editor Script Localization