QNAP QTS / QuTS hero Insufficient HTTP Security Headers (QSA-21-03)

The version of QNAP QTS or QuTS hero on the remote host is affected by a vulnerability involving insufficient HTTP security headers. This vulnerability allows remote attackers to launch privacy and security attacks. Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2018-19957 Insufficient HTTP Security Headers in QTS, QuTS hero, and QuTScloud

A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability allows remote attackers to launch privacy and security attacks. We have already fixed this vulnerability in the following versions: QTS...

PT-2021-8833

Name of the Vulnerable Software and Affected Versions QNAP NAS QTS versions prior to 4.5.4.1715 build 20210630 QNAP NAS QuTS hero versions prior to h4.5.4.1771 build 20210825 QNAP NAS QuTScloud versions prior to c4.5.6.1755 build 20210809 Description A vulnerability involving insufficient HTTP...