← CVE Intelligence

CVE-2024-27775

SysAid - CWE-918: Server-Side Request Forgery (SSRF) PUBLISHED

Description (CNA)

SysAid before version 23.2.14 b18 - CWE-918: Server-Side Request Forgery (SSRF) may allow exposing the local OS user's NTLMv2 hash

Affected (CNA)

Vendor / productVersions
SysAid / SysAidaffected version 23.2.14 b18 through Upgrade to version 23.3.38 or later

CWE

CWE-918

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.