Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2022-22796

Sysaid – Sysaid System Takeover

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCD

Description

Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login button, and it will redirect you to /home.jsp without any authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SysAid Sysaid

  • 21.1.29 cloud version to ≤ 21.1.29affected

SysAid Sysaid

  • 21.4.44 on premise version to ≤ 21.4.44affected

References