NVD

Id
15041  
Name
CVE-2010-3684  
Description
The FTP authentication module in Synology Disk Station 2.x logs passwords to the web application interface in cases of incorrect login attempts, which allows local users to obtain sensitive information by reading a log, a different vulnerability than CVE-2010-2453.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-09-29  
Modified Date
2010-09-30  
Seq
2010-3684  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
84012 15041 CVE-2010-3684 20100926 Web commands injection through FTP Login in Synology Disk Station - CVE-2010-2453  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37413 JVNDB-2010-003198 Synology Disk Station の FTP 認証モジュールにおける重要な情報を取得される脆弱性 Synology Disk Station の FTP 認証モジュールは、不正なログイン試行が発生した場合、Web アプリケーションへのパスワードを記録するため、重要な情報を取得される脆弱性が存在します。 CVE-2010-3684 46264 CVE-2010-3684 15041 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003198.html 2010-09-29 2012-03-27 View