Beveiligingsadvies

CVE-2020-27648

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-10-29 09:00:25
Laatst bijgewerkt 2024-09-16 20:27:27
Toegewezen door synology
CVSS-score 8.3
Status PUBLISHED

Beschrijving

Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.