CVE-2024-38642 | THREATINT

Description

An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to compromise the security of the system via unspecified vectors. We have already fixed the vulnerability in the following version: QuMagie 2.3.1 and later

Reserved 2024-06-19 | Published 2024-09-06 | Updated 2024-09-06 | Assigner qnap

LOW: 1.0CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L

Problem types

CWE-295

Product status

Default status

unaffected

2.3.x before 2.3.1

affected

Credits

anonymous finder

References

www.qnap.com/en/security-advisory/qsa-24-34

cve.org (CVE-2024-38642)

nvd.nist.gov (CVE-2024-38642)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.