PT-2023-8511 · Qnap · Qnap Qts+2
Bingwei Peng
+1
·
Publicado
2023-10-03
·
Atualizado
2024-02-06
·
CVE-2023-45026
CVSS v2.0
6.1
Média
| Vetor | AV:N/AC:L/Au:M/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
QNAP QTS versions prior to 5.1.5.2645 build 20240116
QNAP QuTS hero versions prior to h5.1.5.2647 build 20240118
QNAP QuTScloud versions prior to c5.1.5.2651
Description
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. The issue is related to incorrect restriction of the path name to a directory with limited access, which may allow a remote attacker to gain unauthorized access to protected information.
Recommendations
For QNAP QTS versions prior to 5.1.5.2645 build 20240116, update to QTS 5.1.5.2645 build 20240116 or later.
For QNAP QuTS hero versions prior to h5.1.5.2647 build 20240118, update to QuTS hero h5.1.5.2647 build 20240118 or later.
For QNAP QuTScloud versions prior to c5.1.5.2651, update to QuTScloud c5.1.5.2651 or later.
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Qnap Qts
Qnap Quts Hero
Qnap Qutscloud