CVE-2020-2505CWE-209CWE-755

Sensitive information via generation of error messages vulnerability in QES

Low · published December 24, 2020

CVSS v3.1
2.3
EPSS
0%
Percentile
21.2
In the wild
Unconfirmed
What it is

If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

The record
Technical detail
CVSS v3.1
2.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00297 · 21.2th percentile
Weaknesses
CWE-209 · Generation of Error Message Containing Sensitive Information; CWE-755 · Improper Handling of Exceptional Conditions
Published
2020-12-24T01:39Z
EPSS history
Timeline
  • 24 DEC 01:39Z
    Sensitive information via generation of error messages vulnerability in QES
    cvelistv5