CVE-2020-2506

QNAP Helpdesk suffered an improper access control flaw allowing privilege escalation or data exposure.

The QNAP Helpdesk product contained an improper access control vulnerability that could allow attackers to gain privileges or read sensitive information. This failure impacts DIB organizations by exposing sensitive data and enabling privilege escalation, requiring immediate patching and access control reviews. The flaw was actively exploited in the wild, indicating a significant compliance and security risk.

Shame score — The vulnerability was actively exploited in the wild, indicating a failure to patch known issues and a significant security oversight.