CVE-2024-50394

CWE-295 — Improper Certificate Validation3 documents3 sources
Severity
7.7HIGH
EPSS
0.1%
top 73.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Qnap Systems Inc. HelpdeskQnap Helpdesk
Timeline
PublishedMar 7

Description

An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: Helpdesk 3.3.3 and later

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5qnap_systems_inc./helpdesk3.3.x — 3.3.3
▶NVDqnap/helpdesk3.3.1 — 3.3.3

🔴Vulnerability Details

2
CVEList
Helpdesk↗2025-03-07
▶
GHSA
GHSA-9973-9x4h-pfgx: An improper certificate validation vulnerability has been reported to affect Helpdesk↗2025-03-07
▶
CVE-2024-50394 (HIGH CVSS 7.7) | An improper certificate validation | cvebase.io