CVE-2018-19947: The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive…

PriorityP431medium6.5CVSS 3.1

AVNACLPRLUINSUCHINAN

EPSS

0.76%

51.3th percentile

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
linux	linux_kernel	>= 0 < 4.15.0-115.116	4.15.0-115.116
qnap	helpdesk	< 3.0.3	3.0.3
qnap_systems_inc	helpdesk	>= unspecified < 3.0.3	3.0.3

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

osv7.8HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.