PT-2018-11723 · Synology · Synology Diskstation Manager
CVSS v3.1
7.4
عالية
| المتجه | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Synology DiskStation Manager (DSM) versions prior to 6.2-23739
Description
The issue is related to the use of insufficiently random values in the
SYNO.Encryption.GenRandomKey function, allowing man-in-the-middle attackers to compromise non-HTTPS sessions.Recommendations
For versions prior to 6.2-23739, update to version 6.2-23739 or later to resolve the issue.
إصلاح
Use of Insufficiently Random Values
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Synology Diskstation Manager