CVE-2021-32506

Medium

Absolute Path Traversal vulnerability in GetImage in QSAN Storage Manager allows remote authenticated attackers download arbitrary files…

twcert·CWE-36·Published 2021-07-07

CVSS

6.5

EPSS

0.01

KEV

Exploits

cve.orgen

265 chars

Absolute Path Traversal vulnerability in GetImage in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3 .

NVDen

265 chars

NVDes

298 chars

La vulnerabilidad Absolute Path Traversal en GetImage en QSAN Storage Manager permite a los atacantes remotos autentificados descargar archivos arbitrarios a través del parámetro Url path. La referida vulnerabilidad ha sido resuelta con la versión actualizada de QSAN Storage Manager versión v3.3.3

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.0	8.0	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
3.1	Primary	cve.org	6.5	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N