Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2021-36721

Sysaid - Sysaid API User Enumeration

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCD

Description

Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LDAP server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SysAid SysAid API

  • Sysaid – version 20.4.74 20.4.74affected

References