QNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function.
mitre·CWE-640·Published 2017-06-15