Security Advisory
CVE-2018-12315
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Missing verification of a password in ASUSTOR ADM version 3.1.1 allows attackers to change account passwords without entering the current password.