CVE-2021-45389: Critical severity starwind command center vulnerability
A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process, thus could escalate privileges. This affects StarWind SAN and NAS build 1578 and StarWind Command Center build 6864.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-45389?
CVE-2021-45389 is considered a critical security vulnerability due to its potential for privilege escalation.
What systems are affected by CVE-2021-45389?
CVE-2021-45389 affects StarWind SAN and NAS build 1578 and StarWind Command Center build 6864.
How do I fix CVE-2021-45389?
To fix CVE-2021-45389, update your StarWind SAN and NAS to version 1579 or StarWind Command Center to version 6865.
What type of vulnerability is CVE-2021-45389?
CVE-2021-45389 is a JWT token injection vulnerability that allows unauthorized privilege escalation.
Can CVE-2021-45389 be exploited remotely?
Yes, CVE-2021-45389 can be exploited remotely if an attacker injects a self-signed JWT token.