CVE-2018-19946: The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an…

medium5.9CVSS 3.1

AVNACHPRNUINSUCNIHAN

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
qnap	helpdesk	< 3.0.3	3.0.3
qnap_systems_inc	helpdesk	>= unspecified < 3.0.3	3.0.3