CVE-2019-18385

An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:terra-master:fs-210_firmware:4.0.19:*:*:*:*:*:*:*
cpe:2.3:h:terra-master:fs-210:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:33

Type Values Removed Values Added
References () https://github.com/gusrmsdlrh/CVE-Reserved3/blob/master/README.md - Exploit, Third Party Advisory () https://github.com/gusrmsdlrh/CVE-Reserved3/blob/master/README.md - Exploit, Third Party Advisory

Information

Published : 2019-10-23 21:15

Updated : 2024-11-21 04:33


NVD link : CVE-2019-18385

Mitre link : CVE-2019-18385

CVE.ORG link : CVE-2019-18385


JSON object : View

Products Affected

terra-master

  • fs-210_firmware
  • fs-210
CWE
CWE-532

Insertion of Sensitive Information into Log File