CVE-2021-32516CWE-22

QSAN Storage Manager - Path Traversal

High · published July 7, 2021

CVSS v3.1

7.5

EPSS

Percentile

76.6

In the wild

Unconfirmed

What it is

Path traversal vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.01669 · 76.6th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2021-07-07T14:11Z

EPSS history

Timeline

07 JUL 14:11Z
QSAN Storage Manager - Path Traversal
cvelistv5