CVE-2022-22796

Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login button, and it will redirect you to /home.jsp without any authentication...

CVE-2022-22796: Improper Authentication

Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login button, and it will redirect you to /home.jsp without any authentication...

PT-2022-15685

Name of the Vulnerable Software and Affected Versions Sysaid affected versions not specified Description The issue allows an attacker to bypass the authentication process. This can be achieved by accessing the "/wmiwizard.jsp" API endpoint, then navigating to the "/ConcurrentLogin.jsp" endpoint,...