PT-2025-10103 · Helpdesk · Helpdesk

Corentin + 1 · Published 2025-03-07 · Updated 2026-01-22 · CVE-2024-50394

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Helpdesk versions prior to 3.3.3

Description An improper certificate validation issue has been reported, which could allow remote attackers to compromise the system's security if exploited.

Recommendations For versions prior to 3.3.3, update to version 3.3.3 or later to resolve the issue.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2025-02452

CVE-2024-50394

Affected Products

Helpdesk

References · 17

• https://qnap.com/en/security-advisory/qsa-25-05 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-50394 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-50394 · Security Note
• https://bdu.fstec.ru/vul/2025-02452 · Security Note
• https://t.me/purp_sec/351 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1898562274916450445 · Twitter Post
• https://twitter.com/fridaysecurity/status/1898555622250979686 · Twitter Post
• https://twitter.com/Dinosn/status/1898571960025542756 · Twitter Post
• https://twitter.com/Komodosec/status/1920965640825041197 · Twitter Post
• https://t.me/cveNotify/149593 · Telegram Post
• https://t.me/cvedetector/19848 · Telegram Post
• https://twitter.com/adriananglin/status/1898676198890201326 · Twitter Post
• https://t.me/cvetracker/18691 · Telegram Post
• https://twitter.com/fletch_ai/status/1899324543388520693 · Twitter Post
• https://twitter.com/CCBalert/status/1899527760130797950 · Twitter Post