CVE-2023-47564 | THREATINT

Description

An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.15 ( 2024/01/04 ) and later Qsync Central 4.3.0.11 ( 2024/01/11 ) and later

Reserved 2023-11-06 | Published 2024-02-02 | Updated 2024-08-29 | Assigner qnap

HIGH: 8.0CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Problem types

CWE-732

Product status

Default status

unaffected

4.4.x.x before 4.4.0.15 ( 2024/01/04 )

affected

4.3.x.x before 4.3.0.11 ( 2024/01/11 )

affected

Credits

c411e finder

References

www.qnap.com/en/security-advisory/qsa-24-03

cve.org (CVE-2023-47564)

nvd.nist.gov (CVE-2023-47564)

Download JSON