CVE-2017-9552
13.06.2017, 13:29
A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophoto_dsm_user program to authenticate username and password by "synophoto_dsm_user --auth USERNAME PASSWORD", and local users are able to obtain credentials by sniffing "/proc/*/cmdline".Enginsight
| Vendor | Product | Version |
|---|---|---|
| synology | photo_station | 6.0-2528 |
| synology | photo_station | 6.0-2636 |
| synology | photo_station | 6.0-2638 |
| synology | photo_station | 6.0-2639 |
| synology | photo_station | 6.0-2640 |
| synology | photo_station | 6.3-2944 |
| synology | photo_station | 6.3-2958 |
| synology | photo_station | 6.3-2960 |
| synology | photo_station | 6.3-2962 |
| synology | photo_station | 6.3-2963 |
| synology | photo_station | 6.3-2964 |
| synology | photo_station | 6.3-2965 |
| synology | photo_station | 6.4-3166 |
| synology | photo_station | 6.5.0-3218 |
| synology | photo_station | 6.5.1-3223 |
| synology | photo_station | 6.5.2-3225 |
| synology | photo_station | 6.5.3-3226 |
| synology | photo_station | 6.6.0-3339 |
| synology | photo_station | 6.6.1-3345 |
| synology | photo_station | 6.6.1-3346 |
| synology | photo_station | 6.6.2-3346 |
| synology | photo_station | 6.6.3-3347 |
| synology | photo_station | 6.7.0-3414 |
| synology | photo_station | 6.7.1-3419 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-522 - Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
- CWE-287 - Improper AuthenticationWhen an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
References