VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jan 4, 2022· Updated Jun 17, 2026

CVE-2021-45389

CVE-2021-45389

Description

A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process, thus could escalate privileges. This affects StarWind SAN and NAS build 1578 and StarWind Command Center build 6864.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • StarWind/Command Center2 versions
    cpe:2.3:a:starwind:command_center:6864:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:starwind:command_center:6864:*:*:*:*:*:*:*
    • (no CPE)range: build 6864
  • StarWind/San\&nas
    cpe:2.3:a:starwind:san\&nas:1578:*:*:*:*:*:*:*
  • StarWind/SAN and NASdescription
  • StarWind/SAN and NASllm-fuzzy
    Range: build 1578

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.