{"id":"CVE-2021-47960","aliases":["EUVD-2021-34777","GHSA-frr3-hpw2-j7cq"],"status":"published","title":"A files or directories accessible to external parties vulnerability in Synology SSL VPN Client...","description":"A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation directory via a local HTTP server bound to the loopback interface. By leveraging user interaction with a crafted web page, attackers may retrieve sensitive files such as configuration files, certificates, and logs, leading to information disclosure.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00191,"percentile":0.08843,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-552"],"published":"2026-04-10T09:21:54Z","modified":"2026-06-17T04:18:50Z","products":[{"vendor":"synology","product":"ssl_vpn_client"},{"vendor":"synology","product":"synology ssl vpn client"}],"references":[{"url":"https://www.synology.com/en-global/security/advisory/Synology_SA_26_05","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47960"},{"url":"https://github.com/advisories/GHSA-frr3-hpw2-j7cq"}],"sources":{"cve":[{"id":"CVE-2021-47960","description":"A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation directory via a local HTTP server bound to the loopback interface. By leveraging user interaction with a crafted web page, attackers may retrieve sensitive files such as configuration files, certificates, and logs, leading to information disclosure.","status":"published","published":"2026-04-10T09:21:54.559Z","modified":"2026-04-10T12:43:33.313Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:32:55.905855Z"}],"euvd":[{"id":"EUVD-2021-34777","description":"A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation directory via a local HTTP server bound to the loopback interface. By leveraging user interaction with a crafted web page, attackers may retrieve sensitive files such as configuration files, certificates, and logs, leading to information disclosure.","status":"published","published":"2026-04-10T09:21:54Z","modified":"2026-04-10T12:43:33Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:24:30.341772Z"}],"ghsa":[{"id":"GHSA-frr3-hpw2-j7cq","title":"A files or directories accessible to external parties vulnerability in Synology SSL VPN Client...","description":"A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation directory via a local HTTP server bound to the loopback interface. By leveraging user interaction with a crafted web page, attackers may retrieve sensitive files such as configuration files, certificates, and logs, leading to information disclosure.","status":"published","published":"2026-04-10T12:31:44Z","modified":"2026-04-10T12:31:49Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T15:07:24.880377Z"}],"nvd":[{"id":"CVE-2021-47960","description":"A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation directory via a local HTTP server bound to the loopback interface. By leveraging user interaction with a crafted web page, attackers may retrieve sensitive files such as configuration files, certificates, and logs, leading to information disclosure.","status":"published","published":"2026-04-10T10:16:02.853Z","modified":"2026-06-17T04:18:50.08Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:07:09.005706Z"}]}}