VULNERABILITY INTELLIGENCE

CVE-2018-19947

CVSS score4.3 MEDIUM
EPSS probability0.76%
CISA KEVNot currently listed
Published2020-09-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-209: Generation of Error Message Containing Sensitive Information
  • CWE-210: Self-generated Error Message Containing Sensitive Information

Primary references