CVE-2018-19946: Medium severity qnap qts helpdesk vulnerability
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-19946?
CVE-2018-19946 is an improper certificate validation vulnerability that affects earlier versions of QNAP Helpdesk.
What is the severity of CVE-2018-19946?
CVE-2018-19946 has a severity rating of 5.9, which is considered medium.
How does CVE-2018-19946 affect QNAP Helpdesk?
If exploited, CVE-2018-19946 could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client in QNAP Helpdesk.
Which versions of QNAP Helpdesk are affected by CVE-2018-19946?
Earlier versions of QNAP Helpdesk up to and excluding version 3.0.3 are affected by CVE-2018-19946.
Has QNAP fixed the issue in Helpdesk?
Yes, QNAP has already fixed the CVE-2018-19946 vulnerability in Helpdesk.