CVE-2017-16773

Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote authenticated users to bypass permission checks for directories in POSIX mode.
Configurations

Configuration 1 (hide)

cpe:2.3:a:synology:universal_search:*:*:*:*:*:*:*:*

History

21 Nov 2024, 03:16

Type Values Removed Values Added
CVSS v2 : 6.5
v3 : 8.8
v2 : 6.5
v3 : 6.5
References () https://www.synology.com/en-global/support/security/Synology_SA_18_27 - Vendor Advisory () https://www.synology.com/en-global/support/security/Synology_SA_18_27 - Vendor Advisory

Information

Published : 2018-07-05 13:29

Updated : 2024-11-21 03:16


NVD link : CVE-2017-16773

Mitre link : CVE-2017-16773

CVE.ORG link : CVE-2017-16773


JSON object : View

Products Affected

synology

  • universal_search
CWE
CWE-285

Improper Authorization

CWE-863

Incorrect Authorization