CVEvulnerability

CVE-2018-0728

7.5 HIGH Published 2019-12-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-12-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-269

Description

This improper access control vulnerability in Helpdesk allows attackers to access the system logs. To fix the vulnerability, QNAP recommend updating QTS and Helpdesk to their latest versions.

Affected configurations

• qnap helpdesk (< 3.0.0)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References