Description
Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.2, QSAN XEVO v2.1.0, and QSAN SANOS v2.1.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QSAN | Storage Manager | unspecified – ≤ 3.3.1 | — |
| QSAN | XEVO | unspecified – < 1.2.0 | 1.2.0 |
| QSAN | SANOS | 2.0.0 | — |