San vulnerabilities

2 known vulnerabilities in San from Starwindsoftware. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  NAS: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-24552Feb 6, 2022StarwindsoftwareEPSS 1.31%

  A flaw was found in the REST API in StarWind Stack. REST command, which manipulates a virtual disk, doesn’t check input parameters. Some of them go directly to bash as part of a script. An attacker with non-root user access can inject arbitrary data into the c

• 8.8 High severity

  NAS: Improper Authentication

  CVE-2022-24551Feb 6, 2022Starwindsoftware

  A flaw was found in StarWind Stack. The endpoint for setting a new password doesn’t check the current username and old password. An attacker could reset any local user password (including system/administrator user) using any available user This affects StarWin