PT-2020-8653 · Qnap · Qts

Published 2020-12-31 · Updated 2021-01-07 · CVE-2018-19944

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 4.4.3.1354 build 20200702

Description: A cleartext transmission of sensitive information issue has been reported, allowing a remote attacker to gain access to sensitive information if exploited.

Recommendations: For versions prior to 4.4.3.1354 build 20200702, update to QTS 4.4.3.1354 build 20200702 or later to resolve the issue.

Fix

Cleartext Transmission of Sensitive Information

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-319

CWE-311

Related Identifiers

CVE-2018-19944

Affected Products

Qts

References · 4

• https://osv.dev/vulnerability/CVE-2018-19944 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19944 · Security Note
• https://qnap.com/zh-tw/security-advisory/qsa-20-22 · Vendor Advisory
• https://t.me/cvenotify/8048 · Telegram Post