CVE-2018-19941CWE-315

Cleartext Storage of Sensitive Information in Cookies

published December 31, 2020

CVSS
—
EPSS
1%
Percentile
51.2
In the wild
Unconfirmed
What it is

A vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows an attacker to access sensitive information stored in cleartext inside cookies via certain widely-available tools. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.1.1456 build 20201015 (and later) QuTS hero h4.5.1.1472 build 20201031 (and later) QuTScloud c4.5.2.1379 build 20200730 (and later)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00666 · 51.2th percentile
Weakness
CWE-315 · Cleartext Storage of Sensitive Information in a Cookie
Published
2020-12-31T16:33Z
EPSS history
Timeline
  • 31 DEC 16:33Z
    Cleartext Storage of Sensitive Information in Cookies
    cvelistv5