Improper Access Control Vulnerability in Helpdesk

Summary

An improper access control vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows remote attackers to compromise the security of the software.

QNAP has already fixed this issue in Helpdesk 3.0.4 and later versions.

Recommendation

To fix the vulnerability, we strongly recommend updating Helpdesk to the latest version.

Updating Helpdesk

1. Log on to QTS or QuTS hero as administrator.
2. Open the App Center, and then click .
   A search box appears.
3. Type “Helpdesk”, and then press ENTER.
   The Helpdesk application appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if you are using the latest version.
5. Click OK.
   The application is updated.