Missing verification of a password in ASUSTOR ADM version 3.1.1 allows malicious users to change account passwords without entering the current password.
asustor data_master 3.1.1