1 results (0.003 seconds)

CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 1

QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php. QNAP Photo Station anterior a firmware 4.0.3 build0912 permite a atacantes remotos listar cuentas de usuarios del sistema operativo a través de un solicitud hacia photo/p/api/list.php. • https://exchange.xforce.ibmcloud.com/vulnerabilities/89117 https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-029.txt • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •