CVE-2022-22796 — Sysaid – Sysaid System Takeover
Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login butto…
Published: 2022-05-12 · CVSS: 7.0 · CVSS 3.1
Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login button, and it will redirect you to /home.jsp without any authentication.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7