PT-2018-6337

CVE-2017-16773

·

Published

2018-07-05

·

Updated

2019-10-09

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Synology Universal Search versions prior to 1.0.5-0135
Description: The issue is related to an improper authorization vulnerability in the Highlight Preview feature of Synology Universal Search. This vulnerability allows remote authenticated users to bypass permission checks for directories that are in POSIX mode.
Recommendations: For versions prior to 1.0.5-0135, update to version 1.0.5-0135 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-863: Incorrect Authorization
CWE-285: Improper Authorization
Related identifiers
CVE-2017-16773
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com