CVE-2018-15696

ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi.

Score

CVSS 3.0 4.3 Medium

Status

Modified - vulnreport@tenable.com

Published

2018-08-27

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Data Master (Asustor)
• Asustor Data Master (Tenable)

References

• https://www.tenable.com/security/research/tra-2018-22