Skip to main content
Back to all
2021-07-07

QSAN Storage Manager - Incorrect Permission Assignment for Critical Resource

ZUSOART ID
CVE-2021-32526
CVE ID
CVE-2021-32526
Vulnerability Type
CVSS 4.0 Base
6.5
Description

QSAN Storage Manager存放系統密碼之檔案，因檔案權限設定異常，使遠端攻擊者取得一般使用者權限後，即可讀取密碼檔案內容。

Vendor
Product
Category
Version affected
QSAN Storage Manager <= version 3.3.1 (build 202101041800)
Mitigations

Please refer to QSANS's recommended measures

Release date
2021-07-07
Credit

ZUSO ART (ART@zuso.ai)