| ID |
CVE-2018-19945
|
| Sažetak |
A vulnerability has been reported to affect earlier QNAP devices running QTS 4.3.4 to 4.3.6. Caused by improper limitations of a pathname to a restricted directory, this vulnerability allows for renaming arbitrary files on the target system, if exploited. QNAP have already fixed this vulnerability in the following versions: QTS 4.3.6.0895 build 20190328 (and later) QTS 4.3.4.0899 build 20190322 (and later) This issue does not affect QTS 4.4.x or QTS 4.5.x. |
| Reference |
|
| CVSS |
| Base: | 8.5 |
| Impact: | 7.8 |
| Exploitability: | 10.0 |
|
| Pristup |
| Vektor | Složenost | Autentikacija |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Povjerljivost | Cjelovitost | Dostupnost |
| NONE |
PARTIAL |
COMPLETE |
|
| CVSS vektor |
AV:N/AC:L/Au:N/C:N/I:P/A:C |
| Zadnje važnije ažuriranje |
06-01-2021 - 21:19 |
| Objavljeno |
31-12-2020 - 17:15 |
