CVE-2021-32517

QSAN Storage Manager vulnerable in the share_link feature where improper access control allows remote attackers to download arbitrary files via a specific parameter in the download function. Affected versions are prior to 3.3.3; when updated to v3.3.3, the issue is addressed. Public sources from ...

CVE-2021-32517 QSAN Storage Manager - Improper Access Control

Improper access control vulnerability in sharelink in QSAN Storage Manager allows remote attackers to download arbitrary files using particular parameter in download function. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...