Description (CNA)
Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.2, QSAN XEVO v2.1.0, and QSAN SANOS v2.1.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| QSAN / Storage Manager | affected unspecified through 3.3.1 |
| QSAN / XEVO | affected unspecified before 1.2.0 |
| QSAN / SANOS | affected 2.0.0 |
CWE
CWE-916
References
ADP enrichment
No English description supplied.