CVE-2021-28815: Insecure Storage of Sensitive Information in myQNAPcloud Link
Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link versions prior to 2.2.21 on QTS 4.5.3; versions prior to 2.2.21 on QuTS hero h4.5.2; versions prior to 2.2.21 on QuTScloud c4.5.4.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-28815?
CVE-2021-28815 is a vulnerability that affects QNAP NAS running myQNAPcloud Link, allowing remote attackers to read sensitive information through unrestricted storage mechanism.
How does CVE-2021-28815 impact QNAP NAS running myQNAPcloud Link?
CVE-2021-28815 allows remote attackers to access unrestricted storage mechanism and read sensitive information on QNAP NAS running myQNAPcloud Link.
Which software versions are affected by CVE-2021-28815?
The software version affected by CVE-2021-28815 is myQNAPcloud Link up to version 2.2.21.
How severe is CVE-2021-28815?
CVE-2021-28815 has a severity rating of 4.9 (medium).
How can I fix CVE-2021-28815 vulnerability?
To fix the CVE-2021-28815 vulnerability, update myQNAPcloud Link to a version higher than 2.2.21 as recommended by QNAP Systems Inc.