PT-2017-16402

CVE-2017-5227

·

Published

2017-03-23

·

Updated

2017-08-16

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.2.4 Build 20170313
Description The issue allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file.
Recommendations For versions prior to 4.2.4 Build 20170313, update to version 4.2.4 Build 20170313 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2017-5227
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com