CVE-2020-2506

Critical · 9.8 CISA KEV

CVSS

9.8

EPSS

2.0%

Published

Feb 3, 2021

CISA due date

Apr 15, 2022

The record

The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges, or reading sensitive information. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.

Affected packages

Ecosystem	Package	Introduced	Fixed