Security Advisory

CVE-2018-13282

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-10-31 16:00:00

Last updated 2024-09-16 20:07:10

Assigner synology

CVSS score 5.6

State PUBLISHED

Description

Session fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7-3481 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

← Browse all CVEs View on cve.org ↗