CVE-2022-27599 — QVR Pro Client

Description (CNA)

An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possibly provides local authenticated administrators with an additional, less-protected path to acquiring the information via unspecified vectors. We have already fixed the vulnerability in the following version: Windows 10 SP1, Windows 11, Mac OS, and Mac M1: QVR Pro Client 2.3.0.0420 and later

Affected (CNA)

Vendor / product	Versions
QNAP Systems Inc. / QVR Pro Client	affected 2.3.. before 2.3.0.0420

CWE

CWE-532

References

https://www.qnap.com/en/security-advisory/qsa-23-08

ADP enrichment

CVE

No English description supplied.

https://www.qnap.com/en/security-advisory/qsa-23-08

CISA-ADP

No English description supplied.

No references supplied.