CVE-2021-38688

HIGH

7.1

Descricao

An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following versions of Qfile: Qfile 3.0.0.1105 and later

Detalhes CVE

Pontuacao CVSS v3.17.1

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Vetor de ataqueADJACENT_NETWORK

ComplexidadeHIGH

Privilegios necessariosNONE

Interacao do usuarioREQUIRED

Publicado12/29/2021

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

qnap:qfile

Fraquezas (CWE)

CWE-287

Referencias

https://www.qnap.com/en/security-advisory/qsa-21-55(security@qnapsecurity.com.tw)

https://www.qnap.com/en/security-advisory/qsa-21-55(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.