CVE-2018-15698

CVE-2018-15698: vulnerability in Tenable ASUSTOR Data Master

Published · Updated

Follow this CVE+ Monitor ASUSTOR Data Master

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on the file system when providing the full path to loginimage.cgi.
Affected products
Tenable · ASUSTOR Data Master
Related CVEs — Tenable ASUSTOR Data Master

In the same product, most dangerous first.

CVE-2018-15694—CVE-2018-15694EPSS 1.5%CVE-2018-15695—CVE-2018-15695EPSS 1.0%CVE-2018-15697—CVE-2018-15697EPSS 0.9%CVE-2018-15696—CVE-2018-15696EPSS 0.7%CVE-2018-15699—CVE-2018-15699EPSS 0.6%