title:  Sensitive information via generation of error messages vulnerability in QES
description: If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.
problem types: CWE-209 Information Exposure Through an Error Message
affected:
{
platforms: build 20201006
product: QES
vendor: QNAP Systems Inc.
versions:
lessThan: 2.1.1, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 2.3
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
version: 3.1
]
solutions: QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.