Security Advisory

CVE-2020-27648

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-10-29 09:00:25
Last updated 2024-09-16 20:27:27
Assigner synology
State PUBLISHED

Description

Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.