CVE-2018-19941

CVE-2018-19941: Cleartext Storage of Sensitive Information in Cookies

Vendor Qnap Systems Inc.
Product QTS
Weakness CWE-315
Published December 31, 2020
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows an attacker to access sensitive information stored in cleartext inside cookies via certain widely-available tools. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.1.1456 build 20201015 (and later) QuTS hero h4.5.1.1472 build 20201031 (and later) QuTScloud c4.5.2.1379 build 20200730 (and later)

Key dates

02Disclosure timeline

December 31, 2020 CVE published
September 16, 2024 Record updated