CVE-2022-23855

2022-01-2401:43:48

mitre

www.cve.org

saviynt eic

authentication bypass

password reset

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

58.9%

JSON

An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An authentication bypass in ECM/maintenance/forgotpasswordstep1 allows an unauthenticated user to reset passwords and login as any local account.

References

www.kb.cert.org/vuls/id/692873