3 ms·
Try this: https://forum.qnap.com/viewtopic.php?f=45&t=160849&start=450#p788325 https://forum.qnap.com/viewtopic.php?f=45&t=160849&start=450...
by technion 5y ago
Try this:
https://forum.qnap.com/viewtopic.php?f=45&t=160849&start=450#p788325 https://forum.qnap.com/viewtopic.php?f=45&t=160849&start=450...
- rawoke083600 5y agoWow !
- terom 5y agoReading further along in the forum, the `walter` thing sounds like it's only present in test code and comments. The actual backdoor looks like the `jisoosocoolhbsmgnt` session ID [1] that was removed in the update [2]. It looks like a hardcoded session ID used for tests [3]. Leaving something like that hardcoded and active in the production code is inexcusable. [1] https://forum.qnap.com/viewtopic.php?f=45&t=160849&start=495#p788455 https://forum.qnap.com/viewtopic.php?f=45&t=160849&start=495... [2] https://forum.qnap.com/viewtopic.php?f=45&t=160849&start=555#p788798 https://forum.qnap.com/viewtopic.php?f=45&t=160849&start=555... [3] https://forum.qnap.com/viewtopic.php?f=45&t=160849&start=495#p788526 https://forum.qnap.com/viewtopic.php?f=45&t=160849&start=495...