CVEvulnerability
CVE-2022-23858
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-01-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Description
A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affects StarWind Command Center build 6003 v2.
Affected configurations
• starwindsoftware command center 2
References
- https://www.starwindsoftware.com/security/sw-20220121-0001/ Vendor Advisory
- https://www.starwindsoftware.com/security/sw-20220121-0001/ Vendor Advisory