Lucene search

QnapCVE-2018-19947

HistorySep 11, 2020 - 3:15 p.m.

CVE-2018-19947

2020-09-1115:15:10

CWE-210

CWE-200

CWE-209

qnap

web.nvd.nist.gov

cve-2018-19947

vulnerability

information exposure

helpdesk

qnap

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

26.4%

JSON

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

Affected configurations

Nvd

Node

qnaphelpdeskRange<3.0.3

VendorProductVersionCPE
qnaphelpdesk*cpe:2.3:a:qnap:helpdesk:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
qnap	helpdesk	*	cpe:2.3:a:qnap:helpdesk::::::::

CNA Affected

[
  {
    "product": "Helpdesk",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "3.0.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.qnap.com/zh-tw/security-advisory/qsa-20-05

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

26.4%

JSON

Related for CVE-2018-19947