high7.2
CVE-2025-46617
Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of some software configuration paramet…
Impact
Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of some software configuration parameters via undocumented user credentials. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quantum | Quantum StorNext Web GUI API | before 7.2.4 |
| StorNext RYO | before 7.2.4 | |
| StorNext Xcellis Workflow Director | before 7.2.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.