CVE-2021-38679: Improper Authentication in Kazoo Server
An improper authentication vulnerability has been reported to affect QNAP NAS running Kazoo Server. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Kazoo Server: Kazoo Server 4.11.22 and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-38679?
CVE-2021-38679 is an improper authentication vulnerability that affects QNAP NAS running Kazoo Server.
How does CVE-2021-38679 affect QNAP NAS?
If exploited, CVE-2021-38679 allows attackers to compromise the security of the system.
Which versions of Kazoo Server are affected by CVE-2021-38679?
Kazoo Server versions up to and including 4.11.22 are affected by CVE-2021-38679.
Has the vulnerability CVE-2021-38679 been fixed?
Yes, CVE-2021-38679 has been fixed in Kazoo Server 4.11.23 and later versions.
Where can I find more information about CVE-2021-38679?
You can find more information about CVE-2021-38679 at the following link: [QNAP Security Advisory QSA-22-01](https://www.qnap.com/en/security-advisory/qsa-22-01)