VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 1, 2020· Updated Jun 17, 2026

CVE-2020-2500

CVE-2020-2500

Description

This improper access control vulnerability in Helpdesk allows attackers to get control of QNAP Kayako service. Attackers can access the sensitive data on QNAP Kayako server with API keys. We have replaced the API key to mitigate the vulnerability, and already fixed the issue in Helpdesk 3.0.1 and later versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Qnap/Helpdesk2 versions
    cpe:2.3:a:qnap:helpdesk:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:qnap:helpdesk:*:*:*:*:*:*:*:*range: <3.0.1
    • (no CPE)range: >=3.0.1
  • Qnap/Kayakollm-create
    Range: >=3.0.1
  • QNAP Systems Inc./Helpdeskv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.