Medium · 4.3 CVE-2021-32510 EUVD-2021-19356GHSA-p4cx-wfpq-6ffp

QSAN Storage Manager - Exposure of Information Through Directory Listing Following via Antivirus function

Published Jul 7, 2021 · Updated Sep 16, 2024 · Assigned by twcert

Description

QSAN Storage Manager through directory listing vulnerability in antivirus function allows remote authenticated attackers to list arbitrary directories by injecting file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

Affected products

Vendor	Product	Affected	Fixed
QSAN	Storage Manager	unspecified – ≤ 3.3.1	—

References

https://www.twcert.org.tw/tw/cp-132-4866-b820b-1.html