CVE-2018-19957
Published: Sep 10, 2021
Modified: Sep 17, 2024
Description
A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability allows remote attackers to launch privacy and security attacks. We have already fixed this vulnerability in the following versions: QTS 4.5.4.1715 build 20210630 and later QuTS hero h4.5.4.1771 build 20210825 and later QuTScloud c4.5.6.1755 build 20210809 and later
| Vendor | Product | Versions |
|---|---|---|
QNAP Systems Inc. | QTS | affected unspecified - < 4.5.4.1715 build 20210630 |
QNAP Systems Inc. | QuTS hero | affected unspecified - < h4.5.4.1771 build 20210825 |
QNAP Systems Inc. | QuTScloud | affected unspecified - < c4.5.6.1755 build 20210809 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now