PT-2021-22258 · Qfile · Qfile

Code Ninja + 1 · Published 2021-12-29 · Updated 2022-01-10 · CVE-2021-38688

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Qfile versions prior to 3.0.0.1105

Description An improper authentication issue has been reported to affect the Android App Qfile. If exploited, this issue allows attackers to compromise the app and access information.

Recommendations For versions prior to 3.0.0.1105, update to Qfile 3.0.0.1105 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-38688

Affected Products

Qfile

References · 5

• https://osv.dev/vulnerability/CVE-2021-38688 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38688 · Security Note
• https://qnap.com/en/security-advisory/qsa-21-55 · Vendor Advisory
• https://t.me/cvenotify/25188 · Telegram Post
• https://t.me/cibsecurity/34735 · Telegram Post