A hard-coded password vulnerability has been reported to... · CVE-2020-2499 · GitHub Advisory Database · GitHub

A hard-coded password vulnerability has been reported to...

High severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 29, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could allow attackers to log in with a hard-coded password. QNAP has already fixed the issue in QES 2.1.1 Build 20200515 and later.

References

Published by the National Vulnerability Database

Dec 24, 2020

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 29, 2023