CVE-2022-22796

Sysaid – Sysaid System Takeover

High · published May 12, 2022

CVSS v3.1
7.0
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login button, and it will redirect you to /home.jsp without any authentication.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.01416 · 72.5th percentile
Published
2022-05-12T19:47Z
EPSS history
Timeline
  • 12 MAY 19:47Z
    Sysaid – Sysaid System Takeover
    cvelistv5