← CVE Intelligence

CVE-2022-22796

Sysaid – Sysaid System Takeover PUBLISHED

Description (CNA)

Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login button, and it will redirect you to /home.jsp without any authentication.

Affected (CNA)

Vendor / productVersions
SysAid / Sysaidaffected 21.1.29 cloud version through 21.1.29
SysAid / Sysaidaffected 21.4.44 on premise version through 21.4.44

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.