CVE-2021-32523
Assigner: twcert
Published: 2021-07-07T00:00:00
State: PUBLISHED
affected: product: Storage Manager
vendor: QSAN
versions: lessThanOrEqual: 3.3.1
status: affected
version: unspecified
versionType: custom
datePublic: 2021-07-07T00:00:00
descriptions: value: Improper authorization vulnerability in QSAN Storage Manager allows remote privileged users to bypass the access control and execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.1
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-285
description: CWE-285 Improper Authorization
type: CWE
solutions: value: Please refer to QSANS's recommended measures

source: advisory: TVN-202104028
discovery: EXTERNAL
title: QSAN Storage Manager - Improper Authorization
x_generator: engine: Vulnogram 0.0.9