CVE-2017-15891 - Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authenticated users to modify calendar event via unspecified vectors

Back Back to CVE browser

MEDIUM

Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authenticated users to modify calendar event via unspecified vectors

Published Dec 8, 2017

6.5

MEDIUM

CVSS 3.0

EPSS 1.04%

Description

Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authenticated users to modify calendar event via unspecified vectors.

Affected products

Vendor Synology Product Synology Calendar Default
n/a
- Version
  before 2.0.1-0242
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Synology

Synology Calendar

n/a

Version	Status	Constraints
before 2.0.1-0242	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (1)

https://www.synology.com/en-global/support/security/Synology_SA_17_68_Calendar
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://www.synology.com/en-global/support/security/Synology_SA_17_68_Calendar		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner synology

Published Dec 8, 2017

Updated Sep 16, 2024

Reserved Oct 25, 2017

Link CVE-2017-15891

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-15891

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-15891