CVE-2022-23856

2022-01-2401:43:34

mitre

www.cve.org

saviynt enterprise identity cloud

user enumeration

security issue

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

35.4%

JSON

An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An attacker can enumerate users by changing the id parameter, such as for the ECM/maintenance/forgotpasswordstep1 URI.

References

www.kb.cert.org/vuls/id/692873