CVE-2018-19946

CVE-2018-19946 affects earlier versions of QNAP Helpdesk. The issue is an improper certificate validation vulnerability, enabling an attacker to spoof a trusted entity by interfering in the communication path between the host and client. Root cause: certificate validation weakness in Helpdesk pri...