What is CVE-2020-2505?

CVE-2020-2505 is a low-severity vulnerability in Qnap Qes, classified under Generation of Error Message Containing Sensitive Information. CVSS score: 2.3/10. Published 2020-12-24.

How severe is CVE-2020-2505?

Low severity. CVSS v3 base score is 2.3 out of 10.

Information disclosure in Qnap Qes

CVE-2020-2505

If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.

EPSS: 0.003 (21.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N.

Affected products

Qnap Qes — versions 2.1.1
Qnap Systems Inc. Qes — versions unspecified

Weakness classification (CWE)

CWE-209 — Generation of Error Message Containing Sensitive Information
CWE-755 — Improper Handling of Exceptional Conditions

References

security@qnapsecurity.com.tw (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-2505?: CVE-2020-2505 is a low-severity vulnerability in Qnap Qes, classified under Generation of Error Message Containing Sensitive Information. CVSS score: 2.3/10. Published 2020-12-24.
How severe is CVE-2020-2505?: Low severity. CVSS v3 base score is 2.3 out of 10.