CVE-2021-32516: high-severity vulnerability in QSAN Storage Manager
QSAN Storage Manager - Path Traversal
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in QSAN Storage Manager lets attackers download any file from the server by manipulating file paths. This is dangerous because attackers can access sensitive data they shouldn't be able to reach.
Path traversal vulnerability in the share_link functionality allows unauthenticated remote attackers to bypass directory restrictions and download arbitrary files from the affected system. The vulnerability stems from insufficient input validation on file path parameters, enabling directory traversal sequences to access files outside intended directories.
In the same product, most dangerous first.