PT-2020-4938
CVE-2020-27658
·
تاريخ النشر
2020-10-29
·
تاريخ التحديث
2020-11-03
الوصف من
CVSS 3.1
7.1
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions:
Synology Router Manager (SRM) versions prior to 1.2.4-8081
Description:
The issue is related to the absence of the
HttpOnly flag in session cookies. This makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.Recommendations:
For versions prior to 1.2.4-8081, update to version 1.2.4-8081 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information until the update is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾