First published: Mon Jan 24 2022(Updated: )
A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affects StarWind Command Center build 6003 v2.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Starwindsoftware Command Center | =2-build_6003 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-23858 is a vulnerability found in the REST API of StarWind Command Center build 6003 v2.
The severity of CVE-2022-23858 is critical with a CVSS score of 8.8.
CVE-2022-23858 allows any logged user to elevate privileges up to the system account in StarWind Command Center build 6003 v2.
To fix CVE-2022-23858, it is recommended to update StarWind Command Center to a version that includes the necessary security patches.
You can find more information about CVE-2022-23858 at the following reference: [CVE-2022-23858](https://www.starwindsoftware.com/security/sw-20220121-0001/)