CVE-2022-49037 - Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain sensitive information via unspecified vectors

Back Back to CVE browser

MEDIUM

Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain sensitive information via unspecified vectors

Published Sep 26, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.55%

Description

Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain sensitive information via unspecified vectors.

Affected products

Vendor Synology Product Synology Drive Client Default
affected
- Version
  -
  Status
  affected
  Constraints
  <3.5.0-16084

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Synology

Synology Drive Client

affected

Version	Status	Constraints
-	affected	<3.5.0-16084

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-532

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-53879
Advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_24_10
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-53879		Advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_24_10		vendor-advisoryVendor Advisory