Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Synology Cloud Station 权限许可和访问控制漏洞
Vulnerability Description
Synology Cloud Station是群晖科技（Synology）公司的一套利用云站在所有设备之间同步数据的解决方案。 基于OS X平台的Synology Cloud Station 1.1-2291版本至3.1-3320版本的同步客户端客户端中的client_chown工具中存在安全漏洞。本地攻击者可通过指定文件名利用该漏洞更改任意文件的所有权，获取root权限。
CVSS Information
N/A
Vulnerability Type
N/A