PT-2019-8709 · Qnap · Qts+1

Publicado 2019-12-04 · Atualizado 2019-12-09 · CVE-2018-0728

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions QNAP QTS and Helpdesk (affected versions not specified)

Description This issue is related to improper access control in Helpdesk, allowing attackers to access system logs.

Recommendations Update QTS and Helpdesk to their latest versions.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2018-0728

Produtos afetados

Helpdesk

Qts

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-0728 · Nota de Segurança
• https://qnap.com/zh-tw/security-advisory/nas-201911-20 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-0728 · Aviso do Fabricante