Threats tagged 'ghsa-3grq-vh3r-2ww4'

An authentication bypass vulnerability exists in the OTP component of Synology DiskStation Manager (DSM) versions before 7.3.2-86009-5 and 7.4.1-90080-1. This flaw allows remote attackers with valid user credentials to bypass authentication controls via an alternate path or channel, enabling them to read or write arbitrary files and perform denial-of-service attacks.