Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-32526 EUVD-2021-19372GHSA-683r-jh49-fpr4

QSAN Storage Manager - Incorrect Permission Assignment for Critical Resource

Published Jul 7, 2021 · Updated Sep 16, 2024 · Assigned by twcert

Description

Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

Affected products

VendorProductAffectedFixed
QSAN Storage Manager unspecified – ≤ 3.3.1 —

References