CVE-2025-46617

Quantum / StorNext PUBLISHED

Description (CNA)

Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of some software configuration parameters via undocumented user credentials. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage.

Affected (CNA)

Vendor / product	Versions
Quantum / StorNext	affected 0 before 7.2.4

CWE

CWE-798

References

https://www.quantum.com/en/service-support/security-bulletins/stornext-gui-multiple-security-vulnerabilities-stornext-gui-multiple-security-vulnerabilities/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.