[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-3puClKCB4bSNo5oprPJhoTKSIVK3O7rP-yvkjj6PTc":3,"g5a-risk:CVE-2022-23858":98},{"success":4,"data":5,"meta":96},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":48,"weaknesses":55,"weaknessesCount":48,"isActivelyExploited":59,"cisaInfo":26,"otxData":26,"relatedBlogPosts":60,"seoMetadata":61,"configurations":86,"relatedVendorCves":94,"notableEvents":95},"CVE-2022-23858","What is CVE-2022-23858?","A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affects StarWind Command Center build 6003 v2.","A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affect...","2022-01-24T03:15:09.517","2022-12-09T16:23:45.117",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:C\u002FI:C\u002FA:C","SINGLE","COMPLETE",9,8,10,0.01121,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"starwindsoftware","command_center","2","cpe:2.3:a:starwindsoftware:command_center:2:build_6003:*:*:*:*:*:*",1,[50],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fwww.starwindsoftware.com\u002Fsecurity\u002Fsw-20220121-0001\u002F","Starwindsoftware",[54],"Vendor Advisory",[56],{"id":57,"name":57,"description":58},"Unknown","NVD-CWE-noinfo",false,[],{"title":62,"metaDescription":63,"keywords":64,"canonicalUrl":65,"structuredData":66},"What is CVE-2022-23858? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-23858, a high severity cyber security vulnerability from 2022. A flaw was found in the REST API. An improperly handled RES...","CVE-2022-23858, CVE-2022-23858 vulnerability, CVE-2022-23858 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, starwindsoftware security, command_center vulnerability","\u002Fwhat-is\u002Fcve-2022-23858",{"@context":67,"@type":68,"headline":62,"description":63,"datePublished":10,"dateModified":11,"author":69,"publisher":73,"about":77,"mainEntityOfPage":81,"articleSection":84,"keywords":85},"https:\u002F\u002Fschema.org","TechArticle",{"@type":70,"name":71,"url":72},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":70,"name":71,"url":72,"logo":74},{"@type":75,"url":76},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":78,"name":6,"description":79,"additionalType":80},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":82,"@id":83},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-23858","Cybersecurity","CVE-2022-23858, CVE-2022-23858 vulnerability, CVE-2022-23858 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[87],{"Operator":26,"Negate":26,"Nodes":88},[89],{"Operator":90,"Negate":26,"CPEMatch":91},"OR",[92],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":93,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CB08CCF1-2511-46D3-A443-1BBE2E10EF2F",[],[],{"lastModified":11,"cacheTime":97,"version":32},1792354851221,{"score":99,"band":100,"action":101,"scoredAt":102},47,"Medium","Plan remediation","2026-10-16T06:53:09.572475+00:00"]