Skip to main content

Cleartext Transmission of Sensitive Information

CVE-2020-27656

Medium
6.5/10

Summary

Cleartext transmission of sensitive information vulnerability in DDNS in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to eavesdrop authentication information of DNSExit via unspecified vectors.

  • HIGH
  • NETWORK
  • LOW
  • CHANGED
  • NONE
  • NONE
  • LOW
  • LOW

CWE-319 - Cleartext Transmission of Sensitive Information

The software transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References

Advisory Timeline

  • Published