Qnap · Qts · CVE-2017-5227
**Name of the Vulnerable Software and Affected Versions**
QNAP QTS versions prior to 4.2.4 Build 20170313
**Description**
The issue allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file.
**Recommendations**
For versions prior to 4.2.4 Build 20170313, update to version 4.2.4 Build 20170313 or later to resolve the issue.