CVE-2020-2505 LOW

CVE-2020-2505: Sensitive information via generation of error messages vulnerability in QES

Vendor Qnap Systems Inc.
Product QES
Weakness CWE-209 · Error message info leak
Published December 24, 2020
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

2.3/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

Key dates

02Disclosure timeline

December 24, 2020 CVE published
September 16, 2024 Record updated