Information Exposure Vulnerability in Synology Photo Station by Synology

CVE-2017-12080

What is CVE-2017-12080?

An information exposure vulnerability exists in the default HTTP configuration of Synology Photo Station versions prior to 6.8.1-3458 and 6.3-2970. This flaw allows remote attackers to gain access to sensitive system information by exploiting an improperly configured .htaccess file. Organizations using affected versions should ensure their installations are updated to mitigate risks associated with unauthorized data access.

References