CVE-2018-19947

CVSS 4.3 MEDIUMEPSS 0.8%CWE-200 CWE-209 CWE-210

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4.3EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

11 Sep 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

QNAP Systems Inc. · Helpdesk

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.qnap.com/zh-tw/security-advisory/qsa-20-05