Skip to content

CVE-2018-15696 ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi.

MediumCVSS 4.3 EPSS 0.73%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi.

Affected products

ProductAffected versionsFixed in
ASUSTOR Inc. data master <= 3.1.5 No fix listed
tenable ASUSTOR Data Master = 3.1.5 and below No fix listed

References