Back to all
2021-07-07

QSAN Storage Manager - Exposure of Information Through Directory Listing

ZUSOART ID
CVE-2021-32515
CVE ID
CVE-2021-32515
Vulnerability Type
CVSS 4.0 Base
5.3
Description

QSAN Storage Manager分享連結功能含有目錄清單暴露之漏洞,遠端攻擊者不須任何權限,即可列舉任意目錄列表,進而取得部分敏感資訊。

Vendor
QNAP Systems, Inc.
Product
Category
Version affected
QSAN Storage Manager <= version 3.3.1 (build 202101041800)
Mitigations

QSAN Storage Manager v3.3.3

Release date
2021-07-07
Credit

ZUSO ART (ART@zuso.ai)