CVE-2021-28814CWE-269

Improper Access Control Vulnerability in Helpdesk

High · published June 11, 2021

CVSS v3.1
8.8
EPSS
1%
Percentile
68.6
In the wild
Unconfirmed
What it is

An improper access control vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows remote attackers to compromise the security of the software. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.4.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01225 · 68.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2021-06-11T06:35Z
EPSS history
Timeline
  • 11 JUN 06:35Z
    Improper Access Control Vulnerability in Helpdesk
    cvelistv5