CVE-2021-36721

Sysaid - Sysaid API User Enumeration

Medium · published December 14, 2021

CVSS v3.1
4.4
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LDAP server.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00459 · 38.8th percentile
Published
2021-12-14T13:59Z
EPSS history
Timeline
  • 14 DEC 13:59Z
    Sysaid - Sysaid API User Enumeration
    cvelistv5