CVE-2021-45389

creationtimestamp| type| source ---|---|--- 2022-01-04 18:39:21+00:00| seen| https://t.me/cibsecurity/34927...

CVE-2021-45389

CVE-2021-45389 concerns StarWind SAN & NAS build 1578 and StarWind Command Center build 6864. A flaw allows a self-signed JWT token to be injected into the Update Manager, bypassing authentication and enabling privilege escalation via network access. Root cause: JWT validation/token handling flaw...