PT-2018-11782 · Terramaster · Terramaster Tos

Published 2018-11-27 · Updated 2018-12-21 · CVE-2018-13361

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03

Description The issue allows attackers to enumerate system users. This is achieved through the modgroup parameter in the usertable.php file.

Recommendations For TerraMaster TOS version 3.1.03, consider restricting access to the usertable.php file or the modgroup parameter to prevent user enumeration until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-13361

Affected Products

Terramaster Tos

References · 3

• 🔥 https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a · Exploit
• https://osv.dev/vulnerability/CVE-2018-13361 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-13361 · Security Note