CVE-2021-32526

Published: Jul 7, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: twcert@cert.org.tw (Secondary)

Description

Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

Affected (1)

Products: Qsan: Storage Manager

Qsan

1 product

Storage Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Qsan Storage Manager	Up to 3.3.1

Related CWEs

CWE-732

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (2)

https://www.twcert.org.tw/tw/cp-132-4882-c0310-1.html

Source: twcert@cert.org.tw

Vendor Advisory

https://www.twcert.org.tw/tw/cp-132-4882-c0310-1.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.