CVE-2021-32526

QSAN Storage Manager - Incorrect Permission Assignment for Critical Resource

State: Published
Severity: 6.5 Medium
Published: Jul 7, 2021
Updated: Sep 16, 2024
Reserved: May 10, 2021

Description

Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	twcert

Weaknesses

CWE-732 Incorrect Permission Assignment for Critical Resource

Affected Products

Product	Versions
Storage ManagerQSAN	3.3.1 and earlierAffected

References

https://www.twcert.org.tw/tw/cp-132-4882-c0310-1.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.