安全ID : QSA-23-08
Vulnerability in QVR Pro Client
发布日期 : September 8, 2023
通用漏洞披露 : CVE-2022-27599
受影响产品: QVR Pro Client 2.3
严重程度
Moderate
状态
已解决
Summary
An insertion of sensitive information into log file vulnerability has been reported to affect QVR Pro Client. If exploited, the vulnerability could provide local authenticated administrators with a less-protected path to acquire information via unspecified vectors.
We have already fixed the vulnerability in the following version:
- QVR Pro Client 2.3.0.0420 and later
Recommendation
To secure your device, we recommend regularly updating your system and applications to their latest versions to benefit from vulnerability fixes.
Updating QVR Pro Client
To download the latest version of QVR Pro Client for your operating system, please visit https://www.qnap.com/en/utilities/surveillance/.
附件
致谢: Runzi Zhao, Security Researcher, QI-ANXIN
修订历史:
V1.0 (September 08, 2023) - Published