PT-2020-8656 · Qnap · Helpdesk

Published 2020-09-11 · Updated 2020-09-16 · CVE-2018-19947

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Helpdesk versions prior to 3.0.3

Description: The issue is an information exposure vulnerability that could disclose sensitive information if exploited. It is reported to affect earlier versions of Helpdesk. QNAP has fixed the issue in Helpdesk 3.0.3 and later.

Recommendations: For versions prior to 3.0.3, update to Helpdesk 3.0.3 or a later version to resolve the issue.

Fix

Information Disclosure

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-210

CWE-200

CWE-209

Related Identifiers

CVE-2018-19947

Affected Products

Helpdesk

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-19947 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19947 · Vendor Advisory
• https://qnap.com/zh-tw/security-advisory/qsa-20-05 · Vendor Advisory
• https://t.me/cibsecurity/14614 · Telegram Post