OSNEXUS QuantaStor Multiple Vulnerabilities

OSNEXUS QuantaStor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:osnexus:quantastor"; if...

CVE-2017-9978

OSNEXUS QuantaStor v4 before 4.3.1 contains an information-disclosure vulnerability where the error message for non-existent users can be used to enumerate valid usernames. This CVE (CVE-2017-9978) is documented across multiple sources; affected versions are prior to 4.3.1. Remediation: upgrade t...