CVE-2020-2506

improper access control vulnerability in Helpdesk

State: Published
Severity: 7.3 High
Published: Feb 3, 2021
Updated: Oct 21, 2025
Reserved: Dec 9, 2019

Description

The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges, or reading sensitive information. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L	qnap

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
HelpdeskQNAP Systems Inc.	before 3.0.3Affected

References

https://www.qnap.com/zh-tw/security-advisory/qsa-20-08
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-2506government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.