| Package | Affected versions | Patched versions |
|---|---|---|
| photo station | = 6.0-2528= 6.0-2636= 6.0-2638= 6.0-2639= 6.0-2640= 6.3-2944= 6.3-2958= 6.3-2960= 6.3-2962= 6.3-2963= 6.3-2964= 6.3-2965= 6.4-3166= 6.5.0-3218= 6.5.1-3223= 6.5.2-3225= 6.5.3-3226= 6.6.0-3339= 6.6.1-3345= 6.6.1-3346= 6.6.2-3346= 6.6.3-3347= 6.7.0-3414= 6.7.1-3419 |
A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophoto_dsm_user program to authenticate username and password by "synophoto_dsm_user --auth USERNAME PASSWORD", and local users are able to obtain credentials by sniffing "/proc/*/cmdline".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free