CVE-2022-24551

A flaw was found in StarWind Stack. The endpoint for setting a new password doesn’t check the current username and old password. An attacker could reset any local user password including system/administrator user using any available user This affects StarWind SAN and NAS v0.2 build 1633...

CVE-2022-24551

A flaw was found in StarWind Stack. The endpoint for setting a new password doesn’t check the current username and old password. An attacker could reset any local user password including system/administrator user using any available user This affects StarWind SAN and NAS v0.2 build 1633...

CVE-2022-24551

The CVE-2022-24551 issue affects StarWind SAN & NAS: the password-reset endpoint does not validate the current username and old password, allowing an attacker to reset any local user password (including administrator). Reported for StarWind SAN & NAS v0.2 builds 1633–1684. Mitigation: update to v...