CVE Catalog
CVE-2017-15887
CriticalSummary
An improper restriction of excessive authentication attempts vulnerability in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack.
Risk Assessment
The organization may be exposed to unauthorized access to user accounts, potentially leading to data loss or privacy breaches.
Recommendation
It is recommended to update Synology CardDAV Server to the latest version to mitigate this vulnerability and implement additional security measures such as limiting login attempts.
Original NVD description (English source)
An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack.