CVE-2021-28814: Improper Access Control Vulnerability in Helpdesk
Published Jun 11, 2021
·Updated
An improper access control vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows remote attackers to compromise the security of the software. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.4.
Affected Software
1 affected component
QNAP Helpdesk<3.0.4
Remediation
Information
QNAP has already fixed this issue in Helpdesk 3.0.4 and later versions.
Event History
Jun 11, 2021
CVE Published
via MITRE·06:35 AM
Data Sourced
via MITRE·06:35 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-28814?
CVE-2021-28814 has been rated as high severity due to its potential to allow remote attackers to exploit improper access control.
2
How do I fix CVE-2021-28814?
To fix CVE-2021-28814, update QNAP Helpdesk to version 3.0.4 or later.
3
What products are affected by CVE-2021-28814?
CVE-2021-28814 affects QNAP Helpdesk versions prior to 3.0.4.
4
Can CVE-2021-28814 be exploited remotely?
Yes, CVE-2021-28814 can be exploited remotely by attackers due to improper access control.
5
What impact does CVE-2021-28814 have on security?
CVE-2021-28814 compromises the security of the affected software, allowing unauthorized actions.