CVE-2018-13282 — Synology / Photo Station

CVE-2018-13282

Synology / Photo Station PUBLISHED

Description (CNA)

Session fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7-3481 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

Affected (CNA)

Vendor / product	Versions
Synology / Photo Station	affected unspecified before 6.8.7-3481

CWE

CWE-384

References

https://www.synology.com/en-global/support/security/Synology_SA_18_37

ADP enrichment

CVE

No English description supplied.

https://www.synology.com/en-global/support/security/Synology_SA_18_37