4.3

CVE-2021-32510

EPSS 0.85%
Veröffentlicht 07.07.2021 14:15:10
Zuletzt bearbeitet 21.11.2024 06:07:10
CVE-Watchlists
Login
Unerledigt
Login

QSAN Storage Manager - Exposure of Information Through Directory Listing Following via Antivirus function

QSAN Storage Manager through directory listing vulnerability in antivirus function allows remote authenticated attackers to list arbitrary directories by injecting file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qsan ≫ Storage Manager Version < 3.3.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.85%	0.535

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
Cert TW	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-548 Exposure of Information Through Directory Listing

The product inappropriately exposes a directory listing with an index of all the resources located inside of the directory.

https://www.twcert.org.tw/tw/cp-132-4866-b820b-1.html

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-32510

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-32510

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-32510

EUVD