General : QNAP QTS Authorization Vulnerability (QSA-24-01)

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.151640

Category: General

Title: QNAP QTS Authorization Vulnerability (QSA-24-01)

Summary: QNAP QTS is prone to an incorrect authorization vulnerability.

Description: Summary:
QNAP QTS is prone to an incorrect authorization vulnerability.

Vulnerability Impact:
If exploited, the vulnerability could allow authenticated users
to bypass intended access restrictions via a network.

Affected Software/OS:
QNAP QTS version 4.5.x.

Solution:
Update to version 4.5.4.2627 build 20231225 or later.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:L/Au:S/C:N/I:C/A:N

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2023-32967
https://www.qnap.com/en/security-advisory/qsa-24-01

Copyright Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.151640
Category:	General
Title:	QNAP QTS Authorization Vulnerability (QSA-24-01)
Summary:	QNAP QTS is prone to an incorrect authorization vulnerability.
Description:	Summary: QNAP QTS is prone to an incorrect authorization vulnerability. Vulnerability Impact: If exploited, the vulnerability could allow authenticated users to bypass intended access restrictions via a network. Affected Software/OS: QNAP QTS version 4.5.x. Solution: Update to version 4.5.4.2627 build 20231225 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:C/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-32967 https://www.qnap.com/en/security-advisory/qsa-24-01
Copyright	Copyright (C) 2024 Greenbone AG