Improper access control

2024-01-1304:15:00

PRIOn knowledge base

www.prio-n.com

access control

qstar archive solutions

unauthenticated attackers

system backups

sensitive information

nvd

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.2%

JSON

Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to obtain system backups and other sensitive information from the QStar Server.

CPENameOperatorVersion
archive_storage_managereq30 build7patch0

CPE	Name	Operator	Version
	archive_storage_manager	eq	30 build7patch0

References

github.com/Oracle-Security/CVEs/blob/main/QStar%20Archive%20Solutions/CVE-2023-51065.md