title: Improper Authentication in Qfile
description: An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following versions of Qfile: Qfile 3.0.0.1105 and later
problem types: CWE-287 Improper Authentication
affected:
{
product: Qfile
vendor: QNAP Systems Inc.
versions:
lessThan: 3.0.0.1105, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
]
solutions: We have already fixed this vulnerability in the following versions of Qfile:
Qfile 3.0.0.1105 and later