{"id":"CVE-2021-32526","aliases":["EUVD-2021-19372","GHSA-683r-jh49-fpr4"],"status":"published","title":"QSAN Storage Manager - Incorrect Permission Assignment for Critical Resource","description":"Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00943,"percentile":0.61449,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-732"],"published":"2021-07-07T14:12:11Z","modified":"2026-06-17T03:53:06Z","products":[{"vendor":"dell","product":"storage manager"},{"vendor":"qsan","product":"storage manager"},{"vendor":"qsan","product":"storage_manager"}],"references":[{"url":"https://www.twcert.org.tw/tw/cp-132-4882-c0310-1.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32526"},{"url":"https://github.com/advisories/GHSA-683r-jh49-fpr4"}],"sources":{"cve":[{"id":"CVE-2021-32526","title":"QSAN Storage Manager - Incorrect Permission Assignment for Critical Resource","description":"Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document.","status":"published","published":"2021-07-07T14:12:11.318Z","modified":"2024-09-16T16:24:00.799Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:33:07.014772Z"}],"euvd":[{"id":"EUVD-2021-19372","description":"Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document.","status":"published","published":"2021-07-07T14:12:11Z","modified":"2024-09-16T16:24:00Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:55:52.084115Z"}],"ghsa":[{"id":"GHSA-683r-jh49-fpr4","title":"Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager...","description":"Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files.","status":"published","published":"2022-05-24T19:07:02Z","modified":"2023-01-30T05:00:37Z","cwes":["CWE-732"],"updated_at":"2026-11-02T14:46:14.46933Z"}],"nvd":[{"id":"CVE-2021-32526","description":"Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document.","status":"published","published":"2021-07-07T14:15:11.467Z","modified":"2026-06-17T03:53:06.82Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:06:55.259633Z"}]}}