A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could allow attackers to log in with a hard-coded password. QNAP has already fixed the issue in QES 2.1.1 Build 20200515 and later.
References
Link | Resource |
---|---|
https://www.qnap.com/zh-tw/security-advisory/qsa-20-19 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: qnap
Published: 2020-12-23T00:00:00
Updated: 2020-12-31T16:33:28
Reserved: 2019-12-09T00:00:00
Link: CVE-2020-2499
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-12-24T02:15:12.423
Modified: 2020-12-28T15:39:15.053
Link: CVE-2020-2499
JSON object: View
Redhat Information
No data.