CVE-2021-32510

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager versions prior to 3.3.3

Description: The issue allows remote authenticated attackers to list arbitrary directories by injecting the file path parameter in the antivirus function, potentially leading to unauthorized access to sensitive information.

Recommendations: For versions prior to 3.3.3, update to version 3.3.3 to resolve the issue. As a temporary workaround, consider restricting access to the antivirus function until the update is applied.