Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in StarWind Stack. The endpoint for setting a new password doesn’t check the current username and old password. An attacker could reset any local user password (including system/administrator user) using any available user This affects StarWind SAN and NAS v0.2 build 1633.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
StarWind SAN & NAS 授权问题漏洞
Vulnerability Description
StarWind SAN & NAS是StarWind的独立管理程序服务器或服务器组。 StarWind SAN & NAS 存在授权问题漏洞，该漏洞源于StarWind SAN 和 NAS 0.2 build 1685 之前允许用户重置其他用户的密码。
CVSS Information
N/A
Vulnerability Type
N/A