Skip to content
OpenAdvisories
High · 7.5 CVE-2021-32518 EUVD-2021-19364GHSA-m543-3mp9-rfgf

QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following

Published Jul 7, 2021 · Updated Sep 16, 2024 · Assigned by twcert

Description

A vulnerability in share_link in QSAN Storage Manager allows remote attackers to create a symbolic link then access arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

Affected products

VendorProductAffectedFixed
QSAN Storage Manager unspecified – ≤ 3.3.1 —

References