If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.qnap.com/zh-tw/security-advisory/qsa-20-17 |
History
Mon, 16 Sep 2024 22:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Title | Sensitive information via generation of error messages vulnerability in QES | Sensitive information via generation of error messages vulnerability in QES |
MITRE
Status: PUBLISHED
Assigner: qnap
Published: 2020-12-24T01:39:48.218705Z
Updated: 2024-09-16T21:07:28.461Z
Reserved: 2019-12-09T00:00:00
Link: CVE-2020-2505
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-12-24T02:15:12.750
Modified: 2020-12-28T14:42:11.550
Link: CVE-2020-2505
Redhat
No data.