CVE-2021-32526CWE-732

QSAN Storage Manager - Incorrect Permission Assignment for Critical Resource

Medium · published July 7, 2021

CVSS v3.1
6.5
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00943 · 60.6th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2021-07-07T14:12Z
EPSS history
Timeline
  • 07 JUL 14:12Z
    QSAN Storage Manager - Incorrect Permission Assignment for Critical Resource
    cvelistv5