Vulnerabilities > Synology > Carddav Server > Critical

DATE CVE VULNERABILITY TITLE RISK
2017-11-07 CVE-2017-15887 Improper Restriction of Excessive Authentication Attempts vulnerability in Synology Carddav Server
An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack.
network
low complexity
synology CWE-307
critical
 9.8
9.8