QNAP QTS Vulnerability: Local Auth Bypass Could Allow Data Breaches

CVE-2023-39298

What is CVE-2023-39298?

A missing authorization vulnerability in specific versions of QNAP operating systems has the potential to allow local authenticated users unauthorized access to sensitive data and the ability to perform prohibited actions. This flaw affects versions of QTS and QuTS hero prior to specific builds. QNAP has addressed this issue with patches in the subsequent releases, ensuring enhanced security for users.

References