Back to all
2021-07-07

QSAN Storage Manager - Path Traversal-2

ZUSOART ID
CVE-2021-32527
CVE ID
CVE-2021-32527
Vulnerability Type
CVSS 4.0 Base
7.5
Description

QSAN Storage Manager之複製檔案功能含有Path Traversal漏洞,遠端攻擊者不須任何權限,透過該功能參數輸入任意系統檔案之路徑,即可讀取檔案內容。

Vendor
Product
Category
Version affected
QSAN Storage Manager <= version 3.3.1 (build 202101041800)
Mitigations

Please refer to QSANS's recommended measures

Release date
2021-07-07
Credit

ZUSO ART (ART@zuso.ai)