CVE-2018-13352 Information disclosure in n/a
Attackers can view active session tokens in a world-readable directory, potentially leading to account takeover on TerraMaster NAS devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-13352?
CVE-2018-13352 is a high-severity vulnerability in n/a, published on 27 Nov 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Session Exposure in the web application for TerraMaster TOS version 3.1.03 allows attackers to view active session tokens in a world-readable directory.
Weakness: CWE-200
Which versions are affected by CVE-2018-13352?
It affects 1 product.
Products include Terra-Master Terramaster Operating System.
How do I fix CVE-2018-13352?
No fix has been published for CVE-2018-13352 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-13352 being exploited?
There is no known exploitation of CVE-2018-13352 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-c5ww-wx8p-v3fg.