CVE-2020-27648

Publication date

2020-10-29 09:00:25

Family

synology

State

PUBLISHED

Description

Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.