CVE-2018-19946
—CVSS 3.1
5.9 medium
EPSS
<1%p24
Published
()
Modified
Description
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.
- Vendors
- qnap
- Products
- helpdesk
- Weakness
- CWE-295, CWE-297
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
In the news0 stories
No ingested article mentions this CVE yet.