PT-2021-19744
CVE-2021-32519
·
Published
2021-07-07
·
Updated
2021-09-20
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
QSAN Storage Manager versions prior to 3.3.2
QSAN XEVO versions prior to 2.1.0
QSAN SANOS versions prior to 2.1.0
Description:
The issue allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash due to the use of a password hash with insufficient computational effort.
Recommendations:
For QSAN Storage Manager versions prior to 3.3.2, update to version 3.3.2 or later.
For QSAN XEVO versions prior to 2.1.0, update to version 2.1.0 or later.
For QSAN SANOS versions prior to 2.1.0, update to version 2.1.0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾