| |
Vulnerability CVE-2021-38678
Published: 2022-01-14
| Description: |
An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later |
Type:
CWE-601 (URL Redirection to Untrusted Site ('Open Redirect'))
CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
5.8/10 |
4.9/10 |
8.6/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
Partial |
None |
References: |
https://www.qnap.com/en/security-advisory/qsa-21-60
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
