Firetruck

CVE-2020-2506

KEV

QNAP Helpdesk Improper Access Control Vulnerability

View CVE record →
Vendor / Project
QNAP Systems
Product
Helpdesk
Date added
Mar 25, 2022
Due date
Apr 15, 2022
Known ransomware use
Unknown
CWEs
CWE-284

Description

QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive information.

Required action

Apply updates per vendor instructions.

Notes