CVE-2021-45389

 

Published at: - 04-01-2022 05:15

Last modified: - 01-09-2022 02:15

Total changes: - 3

Description

A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process, thus could escalate privileges. This affects StarWind SAN and NAS build 1578 and StarWind Command Center build 6864.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://www.starwindsoftware.com/security/sw-20211512-0001/
• https://www.starwindsoftware.com/security/sw-20211215-0001/

 

Keywords

NVD

 

CVE-2021-45389

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures