Design/Logic Flaw

2024-01-1304:15:00

PRIOn knowledge base

www.prio-n.com

access control

design flaw

logic flaw

qstar archive solutions

smb service

unauthenticated attackers

command execution

nvd

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.1%

JSON

An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disable the SMB service on a victim’s Qstar instance by executing a specific command in a link.

CPENameOperatorVersion
archive_storage_managereq30 build7patch0

CPE	Name	Operator	Version
	archive_storage_manager	eq	30 build7patch0

References

github.com/Oracle-Security/CVEs/blob/main/QStar%20Archive%20Solutions/CVE-2023-51071.md