2021-07-07

QSAN Storage Manager - Exposure of Information Through Directory Listing Following via ViewBroserList function

ZUSOART ID

CVE-2021-32511

CVE ID

CVE-2021-32511

Vulnerability Type

CVSS 4.0 Base

4.3

Description

QSAN Storage Manager的瀏覽器清單功能含有Through Directory Listing漏洞，允許遠端攻擊者以一般使用者權限，利用此功能之參數，列舉出任意目錄的檔案清單。

Vendor

QNAP Systems, Inc.

Product