CVE-2021-32515
Assigner: twcert
Published: 2021-07-07T00:00:00
State: PUBLISHED
affected: product: Storage Manager
vendor: QSAN
versions: lessThanOrEqual: 3.3.1
status: affected
version: unspecified
versionType: custom
datePublic: 2021-07-07T00:00:00
descriptions: value: Directory listing vulnerability in share_link in QSAN Storage Manager allows attackers to list arbitrary directories and further access credential information. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-548
description: CWE-548 Information Exposure Through Directory Listing
type: CWE
solutions: value: QSAN Storage Manager v3.3.3
source: advisory: TVN-202104020
discovery: EXTERNAL
title: QSAN Storage Manager - Exposure of Information Through Directory Listing
x_generator: engine: Vulnogram 0.0.9