| Package | Affected versions | Patched versions |
|---|---|---|
| nas | < 0.2 | 0.2 |
| san | < 0.2 | 0.2 |
A flaw was found in StarWind Stack. The endpoint for setting a new password doesn’t check the current username and old password. An attacker could reset any local user password (including system/administrator user) using any available user This affects StarWind SAN and NAS v0.2 build 1633.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free