CVE-2022-24551

A flaw was found in StarWind Stack

published February 6, 2022

CVSS
—
EPSS
1%
Percentile
58.9
In the wild
Unconfirmed
What it is

A flaw was found in StarWind Stack. The endpoint for setting a new password doesn’t check the current username and old password. An attacker could reset any local user password (including system/administrator user) using any available user This affects StarWind SAN and NAS v0.2 build 1633.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00886 · 58.9th percentile
Published
2022-02-06T20:18Z
EPSS history
Timeline
  • 06 FEB 20:18Z
    A flaw was found in StarWind Stack
    cvelistv5