CVE-2023-51063

QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 contains a DOM-based Reflected XSS in the qnme-ajax?method=tree_level endpoint. Affected software/component: QStar Archive Solutions (RELEASE 3-0, Build 7 Patch 0); vulnerability type: DOM-based Reflected XSS in qnme-ajax. Root cause as ...

CVE-2023-51071

The CVE-2023-51071 entry describes an access-control flaw in QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0 that lets unauthenticated attackers disable the SMB service on a QStar instance by triggering a specific command in a link. Affected software: QStar Archive Solutions (Release RELEASE_...

CVE-2023-51065

CVE-2023-51065 describes an Imprudent/ Improper access control vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 . The root cause is an access-control flaw that allows unauthenticated attackers to obtain system backups and other sensitive information from the QStar Serv...

QStar Archive Solutions Security Breach

QStar Archive Solutions is QStar's range of storage technologies for managing disk arrays, object storage, tape libraries, optical libraries, WORM and clouds private and hybrid. A security vulnerability exists in the QStar Archive Solutions RELEASE3-0 Build 7 release that stems from an informatio...

QStar Archive Solutions Security Breach

QStar Archive Solutions is QStar's range of storage technologies for managing disk arrays, object storage, tape libraries, CD-ROM libraries, WORM and clouds private and hybrid. A security vulnerability exists in QStar Archive Solutions RELEASE3-0 Build 7 release that stems from the presence of an...

CVE-2023-51062: Missing Authentication for Critical Function

An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE3-0 Build 7 Patch 0 allows attackers to disclose the SMB Log contents via executing a crafted command...

CVE-2023-51063

QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting XSS vulnerability within the component qnme-ajax?method=treelevel...

CVE-2023-51066

An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 allows attackers to arbitrarily execute commands...

CVE-2023-51064

QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerability within the component qnme-ajax?method=treetable...

CVE-2023-51062

An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE3-0 Build 7 Patch 0 allows attackers to disclose the SMB Log contents via executing a crafted command...

CVE-2023-51071

An access control issue in QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disable the SMB service on a victim's Qstar instance by executing a specific command in a link...

CVE-2023-51070

CVE-2023-51070 concerns QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0. The issue is described as an access-control flaw that allows unauthenticated attackers to arbitrarily adjust sensitive SMB settings on the QStar Server. The affected software is QStar Archive Solutions Release RE...

CVE-2023-51068

CVE-2023-51068 affects QStar Archive Solutions RELEASE_3-0 Build 7. The vulnerability is an authenticated reflected cross-site scripting (XSS) in which an attacker can trigger arbitrary JavaScript in a victim’s browser via a crafted link. Root cause is an XSS flaw in the handling of links within ...

PT-2024-14044 · Qstar · Qstar Archive Solutions

Name of the Vulnerable Software and Affected Versions: QStar Archive Solutions Release RELEASE 3-0 Build 7 Patch 0 Description: The issue is related to incorrect access control, allowing unauthenticated attackers to obtain system backups and other sensitive information from the QStar Server...

CVE-2023-51062

Summary : CVE-2023-51062 affects QStar Archive Solutions, RELEASE_3-0 Build 7 Patch 0. An unauthenticated read of the log-smblog-save component can disclose SMB log contents when a crafted command is executed. The NVD/CVSS indicates network access with low complexity and no privileges required, r...

CVE-2023-51067

The CVE-2023-51067 entry describes an unauthenticated reflected XSS in QStar Archive Solutions Release RELEASE_3-0 Build 7, enabling an attacker to run arbitrary JavaScript in a victim’s browser via a crafted link. The connected documents consistently reference the same vulnerability description ...

CVE-2023-51064

CVE-2023-51064 affects QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0. The qnme-ajax component’s tree_table endpoint (method=tree_table) is vulnerable to a DOM-based reflected XSS, enabling an attacker-controlled script to be executed in the victim’s browser as described across multiple sour...

CVE-2023-51066

CVE-2023-51066 describes an authenticated remote code execution in QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0. The vulnerability is network-attackable and requires low privileges with no user interaction; impact is high on confidentiality, integrity, and availability. Several sources (NV...

PT-2024-14047 · Qstar · Qstar Archive Solutions

Name of the Vulnerable Software and Affected Versions: QStar Archive Solutions version RELEASE 3-0 Build 7 Description: The issue is related to an authenticated reflected cross-site scripting XSS vulnerability. This allows attackers to execute arbitrary javascript on a victim's browser via a...

QStar Archive Solutions Security Breach

QStar Archive Solutions is QStar's range of storage technologies for managing disk arrays, object storage, tape libraries, optical libraries, WORM and clouds private and hybrid. A security vulnerability exists in the QStar Archive Solutions RELEASE3-0 Build 7 release, which stems from a DOM-based...