Nasuni Service Advisory
#250619
June 2025
Immediate Action Required: Web Access Shared Links Vulnerability
Nasuni has identified an important vulnerability with the Shared Links feature of Web Access that may lead to unauthorized access to content outside of the scope of the shared link. Our records indicate that your organization has this feature enabled. If you do not use Shared Links, no action is required.
This vulnerability has been addressed in version 10.0.3+ and in 9.15.7. If you are using Shared Links, we strongly recommend updating to version 10.0.3+ or 9.15.7. If you are unable to update, we strongly recommend that you disable the Shared Link feature for each share configured with Web Access.
Note: This vulnerability does not affect Nasuni Access Anywhere.
Affected Versions
All versions prior to 9.15.7
All versions of 10.0.x prior to 10.0.3
Required Action
If your NEAs are configured to allow the creation of shared links, please update them to version 10.0.3+ or 9.15.7 as soon as possible. There is no need to recreate existing shared links. If you are unable to update, disable the Shared Link feature.
Failure to update may result in unintended exposure of SMB shares via new or existing shared links.
Need Help?
If you need any assistance, our team is here to help! Reach out to Nasuni Support at www.nasuni.com/support or via email at support@nasuni.com for guidance or to answer any questions you might have.
The details of this advisory can also be found in Knowledge Base Article 13387 on our Community site for more information (requires login).
Nasuni Corporation | Account Management | Technical Support |
LEGAL DISCLAIMER
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. NASUNI RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.
Copyright 2010-2025 Nasuni Corporation. All rights reserved.
Nasuni is a registered trademark of Nasuni Corporation in the U.S. and other countries.
All other trademarks are the property of their respective owners.