QNAP QTS before 4.2.4 Build 20170313 allows attackers to obtain sensitive information via vectors related to a configuration file.