Vulnerability Description
Directory listing vulnerability in share_link in QSAN Storage Manager allows attackers to list arbitrary directories and further access credential information. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qsan | Storage Manager | < 3.3.3 |
Related Weaknesses (CWE)
References
- https://www.twcert.org.tw/tw/cp-132-4871-2a2d7-1.htmlThird Party Advisory
- https://www.twcert.org.tw/tw/cp-132-4871-2a2d7-1.htmlThird Party Advisory
FAQ
What is CVE-2021-32515?
CVE-2021-32515 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Directory listing vulnerability in share_link in QSAN Storage Manager allows attackers to list arbitrary directories and further access credential information. The referred vulnerability has been solv...
How severe is CVE-2021-32515?
CVE-2021-32515 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-32515?
Check the references section above for vendor advisories and patch information. Affected products include: Qsan Storage Manager.