High · 7.2 CVE-2024-27775 EUVD-2024-24968GHSA-8hpx-7pm4-9fx9

SysAid - CWE-918: Server-Side Request Forgery (SSRF)

Published Mar 28, 2024 · Updated Aug 2, 2024 · Assigned by INCD

Description

SysAid before version 23.2.14 b18 - CWE-918: Server-Side Request Forgery (SSRF) may allow exposing the local OS user's NTLMv2 hash

Vendor	Product	Affected	Fixed
SysAid	SysAid	version 23.2.14 b18 – ≤ Upgrade to version 23.3.38 or later	—