1. Home
  2. CVE Database
  3. CVE-2022-27599
MEDIUM · 6.7

CVE-2022-27599

An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possibly provides local authenticated administrators with an addi...

Vulnerability Description

An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possibly provides local authenticated administrators with an additional, less-protected path to acquiring the information via unspecified vectors. We have already fixed the vulnerability in the following version: Windows 10 SP1, Windows 11, Mac OS, and Mac M1: QVR Pro Client 2.3.0.0420 and later

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QnapQvr Pro Client< 2.3.0.0420

Related Weaknesses (CWE)

CWE-532

References

FAQ

What is CVE-2022-27599?

CVE-2022-27599 is a vulnerability with a CVSS score of 6.7 (MEDIUM). An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possibly provides local authenticated administrators with an addi...

How severe is CVE-2022-27599?

CVE-2022-27599 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-27599?

Check the references section above for vendor advisories and patch information. Affected products include: Qnap Qvr Pro Client.