CVE-2017-7639

QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly. Successful exploitation can lead to change of the settings of Proxy Server.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2018-06-05

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• Nas Proxy Server (Qnap)

References

• http://www.securitytracker.com/id/1041025
• https://www.qnap.com/en/security-advisory/nas-201806-01