title: Open Redirect Vulnerability in QcalAgent
description: An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later
problem types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
product: QcalAgent
vendor: QNAP Systems Inc.
versions:
lessThan: 1.1.7, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
version: 3.1
]
solutions: We have already fixed this vulnerability in the following versions of QcalAgent:
QcalAgent 1.1.7 and later