CVE-2021-32527CWE-22

QSAN Storage Manager - Path Traversal-2

High · published July 7, 2021

CVSS v3.1
7.5
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

Path traversal vulnerability in QSAN Storage Manager allows remote unauthenticated attackers to download arbitrary files thru injecting file path in download function. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01743 · 77.6th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2021-07-07T14:12Z
EPSS history
Timeline
  • 07 JUL 14:12Z
    QSAN Storage Manager - Path Traversal-2
    cvelistv5