Security Advisory

CVE-2017-9552

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-06-13 13:00:00

Last updated 2024-08-05 17:11:02

Assigner synology

CVSS score not scored

State PUBLISHED

Description

A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophoto_dsm_user program to authenticate username and password by "synophoto_dsm_user --auth USERNAME PASSWORD", and local users are able to obtain credentials by sniffing "/proc/*/cmdline".

← Browse all CVEs View on cve.org ↗