VulnerabilityModified
CVE-2022-23858
An improperly handled REST API call could allow any logged user to elevate privileges up to the system account.
HIGH 8.8EPSS 1.12%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.12%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affects StarWind Command Center build 6003 v2.
- CVSS 3.1
- 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.12% probability · 64th percentile
- CISA KEV
- Not listed
- Affected
- starwindsoftware/command center
- Source
- cve@mitre.org
References
- https://www.starwindsoftware.com/security/sw-20220121-0001/Vendor Advisory
- https://www.starwindsoftware.com/security/sw-20220121-0001/Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.