VULNERABILITY INTELLIGENCE

CVE-2021-32526

CVSS score6.5 MEDIUM
EPSS probability0.94%
CISA KEVNot currently listed
Published2021-07-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

Weakness classification

  • twcert@cert.org.tw: CWE-732
  • nvd@nist.gov: CWE-732

Primary references