CVE-2018-15698

ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on the file system when providing the full path to loginimage.cgi.

Score

CVSS 3.0 6.5 Medium

Status

Modified - vulnreport@tenable.com

Published

2018-08-27

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Data Master (Asustor)
• Asustor Data Master (Tenable)

References

• https://www.tenable.com/security/research/tra-2018-22