Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9mp7-fmr4-g9vw

Опубликовано: 06 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 6.0.20 ( 2022/02/15 ) and later Photo Station 5.7.16 ( 2022/02/11 ) and later Photo Station 5.4.13 ( 2022/02/11 ) and later

An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 6.0.20 ( 2022/02/15 ) and later Photo Station 5.7.16 ( 2022/02/11 ) and later Photo Station 5.4.13 ( 2022/02/11 ) and later

EPSS

Процентиль: 57%
0.0035
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 7.1
nvd
почти 4 года назад

An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 6.0.20 ( 2022/02/15 ) and later Photo Station 5.7.16 ( 2022/02/11 ) and later Photo Station 5.4.13 ( 2022/02/11 ) and later

CVSS3: 9.8
fstec
почти 4 года назад

Уязвимость приложения для хранения фотографий Photo Station, связанная с недостатками процедуры аутентификации, позволяющая нарушителю обойти существующие ограничения безопасности

EPSS

Процентиль: 57%
0.0035
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287