CVEvulnerability

CVE-2010-3684

2.1 LOW Published 2010-09-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-09-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-255

Description

The FTP authentication module in Synology Disk Station 2.x logs passwords to the web application interface in cases of incorrect login attempts, which allows local users to obtain sensitive information by reading a log, a different vulnerability than CVE-2010-2453.

Affected configurations

• synology dsm 2.2-0942 • synology dsm 2.2-1041 • synology dsm 2.2-1042 • synology dsm 2.2-1045 • synology dsm 2.3-1139 • synology dsm 2.3-1141 • synology dsm 2.3-1144 • synology dsm 2.3-1157 • synology dsm 2.3-1161

Related

Weakness · not in database (1)

References