CVE-2017-5227

QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file.
Configurations

Configuration 1 (hide)

cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-03-23 16:59

Updated : 2024-02-04 19:11


NVD link : CVE-2017-5227

Mitre link : CVE-2017-5227

CVE.ORG link : CVE-2017-5227


JSON object : View

Products Affected

qnap

  • qts
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor