Количество 3
Количество 3
CVE-2021-47960
A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation directory via a local HTTP server bound to the loopback interface. By leveraging user interaction with a crafted web page, attackers may retrieve sensitive files such as configuration files, certificates, and logs, leading to information disclosure.
GHSA-frr3-hpw2-j7cq
A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation directory via a local HTTP server bound to the loopback interface. By leveraging user interaction with a crafted web page, attackers may retrieve sensitive files such as configuration files, certificates, and logs, leading to information disclosure.
BDU:2026-05281
Уязвимость VPN-клиента Synology SSL VPN Client, связанная с использованием файлов и каталогов, доступных внешним сторонам, позволяющая нарушителю получить доступ к защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-47960 A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation directory via a local HTTP server bound to the loopback interface. By leveraging user interaction with a crafted web page, attackers may retrieve sensitive files such as configuration files, certificates, and logs, leading to information disclosure. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| GHSA-frr3-hpw2-j7cq A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation directory via a local HTTP server bound to the loopback interface. By leveraging user interaction with a crafted web page, attackers may retrieve sensitive files such as configuration files, certificates, and logs, leading to information disclosure. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | BDU:2026-05281 Уязвимость VPN-клиента Synology SSL VPN Client, связанная с использованием файлов и каталогов, доступных внешним сторонам, позволяющая нарушителю получить доступ к защищаемой информации | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу