CVE-2018-19946

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in...

CVE-2018-19947

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later...

CVE-2018-19948

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery CSRF vulnerability could allow attackers to force NAS users to execute unintentional actions through a web application. QNAP has already fixed the issue in Helpdesk 3.0.3 and...

CVE-2018-19946

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in...

Input validation

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in...

Information disclosure

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later...

Cross site request forgery (csrf)

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery CSRF vulnerability could allow attackers to force NAS users to execute unintentional actions through a web application. QNAP has already fixed the issue in Helpdesk 3.0.3 and...

CVE-2018-19946

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in...

CVE-2018-19946

CVE-2018-19946 affects earlier versions of QNAP Helpdesk. The issue is an improper certificate validation vulnerability, enabling an attacker to spoof a trusted entity by interfering in the communication path between the host and client. Root cause: certificate validation weakness in Helpdesk pri...

CVE-2018-19947

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later...

CVE-2018-19947

The CVE applies to QNAP Helpdesk (older builds). It describes an information exposure vulnerability that affects earlier Helpdesk versions and states that QNAP has fixed the issue in Helpdesk 3.0.3 and later. The connected Red Hat and NVD records corroborate this by reiterating the same affected-...

CVE-2018-19948

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery CSRF vulnerability could allow attackers to force NAS users to execute unintentional actions through a web application. QNAP has already fixed the issue in Helpdesk 3.0.3 and...

CVE-2018-19948

CVE-2018-19948 affects QNAP Helpdesk (the web-based component of NAS devices). The vulnerability is a cross-site request forgery (CSRF) that could cause authenticated NAS users to perform unintended actions via the web interface. The issue concerns earlier Helpdesk versions, and QNAP notes a fix ...

PT-2020-8656

Name of the Vulnerable Software and Affected Versions: Helpdesk versions prior to 3.0.3 Description: The issue is an information exposure vulnerability that could disclose sensitive information if exploited. It is reported to affect earlier versions of Helpdesk. QNAP has fixed the issue in Helpde...

PT-2020-8655

Name of the Vulnerable Software and Affected Versions: Helpdesk versions prior to 3.0.3 Description: The issue is related to improper certificate validation, which could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client...

PT-2020-8657

Name of the Vulnerable Software and Affected Versions: Helpdesk versions prior to 3.0.3 Description: The issue is a cross-site request forgery CSRF vulnerability that could allow attackers to force NAS users to execute unintentional actions through a web application. This vulnerability affects...

CVE-2018-19946: Improper Certificate Validation

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in...

CVE-2018-19947: Exposure of Sensitive Information to an Unauthorized Actor

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later...

CVE-2018-19948: Cross-Site Request Forgery (CSRF)

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery CSRF vulnerability could allow attackers to force NAS users to execute unintentional actions through a web application. QNAP has already fixed the issue in Helpdesk 3.0.3 and...

A Successful Self-Service Password Reset (SSPR) Project Requires User Adoption

IT help desks everywhere are having to adjust to the 'new normal' of supporting mainly remote workers. This is a major shift away from visiting desks across the office and helping ones with traditional IT support processes. Many reasons end-users may contact the helpdesk. However, password relate...