PT-2018-11776

CVE-2018-13356

Published

2018-11-27

Updated

2019-10-03

CVSS 2.0

9.0

High

MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03

Description The issue is related to incorrect access control on the ajaxdata.php file, which allows attackers to elevate user permissions.

Recommendations For TerraMaster TOS version 3.1.03, update to a version that fixes the incorrect access control issue on the ajaxdata.php file.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾