Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-19946

Опубликовано: 11 сент. 2020
Источник: nvd
CVSS3: 4.2
CVSS3: 5.9
CVSS2: 4.3
EPSS Низкий

Описание

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:qnap:helpdesk:*:*:*:*:*:*:*:*
Версия до 3.0.3 (исключая)

EPSS

Процентиль: 28%
0.001
Низкий

4.2 Medium

CVSS3

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-295
CWE-295

Связанные уязвимости

github
больше 3 лет назад

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

EPSS

Процентиль: 28%
0.001
Низкий

4.2 Medium

CVSS3

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-295
CWE-295