Qnap QTS Exposure of Sensitive Information to an Unauthorized Actor (CVE-2017-5227)

QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file. This plugin only works with Tenable.ot. Please visit...

CVE-2017-5227

creationtimestamp| type| source ---|---|--- 2017-03-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41745...

QNAP QTS 4.2.4 - Domain Privilege Escalation

QNAP QTS 4.2.4 - Domain Privilege Escalation QNAP QTS Domain Privilege Escalation Vulnerability Name Sensitive Data Exposure in QNAP QTS Systems Affected QNAP QTS NAS all model and all versions 4.2.4 Severity High 7.9/10 Impact CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Vendor...

CVE-2017-5227

CVE-2017-5227 affects QNAP QTS prior to 4.2.4 Build 20170313. Local (non‑remote) users can read data stored in XOR format inside /etc/config/uLinux.conf to obtain sensitive Domain Administrator password information. The available connected documents consistently describe the same effect and targe...