CVE Vulnerabilities

CVE-2021-32520

Use of Hard-coded Cryptographic Key

Published: Jul 07, 2021 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Use of hard-coded cryptographic key vulnerability in QSAN Storage Manager allows attackers to obtain users’ credentials and related permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

Weakness

The product uses a hard-coded, unchangeable cryptographic key.

Affected Software

Name Vendor Start Version End Version
Storage_manager Qsan * 3.3.1 (including)

Potential Mitigations

References