Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2018-19957
PUBLISHED
More InfoOfficial Page
Assigner-qnap
Assigner Org ID-2fd009eb-170a-4625-932b-17a53af1051f
View Known Exploited Vulnerability (KEV) details
Published At-10 Sep, 2021 | 04:00
Updated At-17 Sep, 2024 | 02:57
Rejected At-
▼CVE Numbering Authority (CNA)
Insufficient HTTP Security Headers in QTS, QuTS hero, and QuTScloud

A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability allows remote attackers to launch privacy and security attacks. We have already fixed this vulnerability in the following versions: QTS 4.5.4.1715 build 20210630 and later QuTS hero h4.5.4.1771 build 20210825 and later QuTScloud c4.5.6.1755 build 20210809 and later

Affected Products
Vendor
QNAP Systems, Inc.QNAP Systems Inc.
Product
QTS
Versions
Affected
  • From unspecified before 4.5.4.1715 build 20210630 (custom)
Vendor
QNAP Systems, Inc.QNAP Systems Inc.
Product
QuTS hero
Versions
Affected
  • From unspecified before h4.5.4.1771 build 20210825 (custom)
Vendor
QNAP Systems, Inc.QNAP Systems Inc.
Product
QuTScloud
Versions
Affected
  • From unspecified before c4.5.6.1755 build 20210809 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-1021CWE-1021
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

QNAP have already fixed this vulnerability in the following versions: QTS 4.5.4.1715 build 20210630 and later QuTS hero h4.5.4.1771 build 20210825 and later QuTScloud c4.5.6.1755 build 20210809 and later

Configurations
Workarounds
Exploits
Credits
Independent Security Evaluators
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.qnap.com/en/security-advisory/qsa-21-03
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.qnap.com/en/security-advisory/qsa-21-03
x_refsource_MISC
x_transferred
Details not found