Описание
A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affects StarWind Command Center build 6003 v2.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:starwindsoftware:command_center:2:build_6003:*:*:*:*:*:*
EPSS
Процентиль: 68%
0.00557
Низкий
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 8.8
github
около 4 лет назад
In StarWind Command Center before V2 build 6021, an authenticated read-only user can elevate privileges to administrator through the REST API.
EPSS
Процентиль: 68%
0.00557
Низкий
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
NVD-CWE-noinfo