PT-2021-19743

CVE-2021-32518

·

Published

2021-07-07

·

Updated

2022-07-02

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager versions prior to 3.3.3
Description: A vulnerability in the share link component of QSAN Storage Manager allows remote attackers to create a symbolic link and then access arbitrary files.
Recommendations: For versions prior to 3.3.3, update to version 3.3.3 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-59: Improper Link Resolution Before File Access (\'Link Following\')
CWE-61: UNIX Symbolic Link (Symlink) Following
Related identifiers
CVE-2021-32518
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com