CVE-2022-22796

Name of the Vulnerable Software and Affected Versions Sysaid (affected versions not specified)

Description The issue allows an attacker to bypass the authentication process. This can be achieved by accessing the "/wmiwizard.jsp" API endpoint, then navigating to the "/ConcurrentLogin.jsp" endpoint, clicking on the login button, which redirects to the "/home.jsp" endpoint without requiring any authentication.

Recommendations As a temporary workaround, consider restricting access to the "/wmiwizard.jsp", "/ConcurrentLogin.jsp", and "/home.jsp" API endpoints until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.