Skip to content
OpenAdvisories
Medium · 4.4 CVE-2021-36721 EUVD-2021-23314GHSA-3fmg-j52q-2cm9

Sysaid - Sysaid API User Enumeration

Published Dec 14, 2021 · Updated Sep 16, 2024 · Assigned by INCD

Vendor: SysAid Product: SysAid API

Description

Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LDAP server.

Affected products

VendorProductAffectedFixed
SysAid SysAid API Sysaid – version 20.4.74 20.4.74 —

References