CVE-2021-44523

Name of the Vulnerable Software and Affected Versions: SiPass integrated versions 2.76 through 2.85 Siveillance Identity versions 1.5 through 1.6.283

Description: A vulnerability has been identified in the affected applications, where they insufficiently limit access to the internal activity feed database. This could allow an unauthenticated remote attacker to read, modify, or delete activity feed entries.

Recommendations: For SiPass integrated versions 2.76 through 2.85, restrict access to the internal activity feed database until a patch is available. For Siveillance Identity versions 1.5 through 1.6.283, consider disabling access to the activity feed database to minimize the risk of exploitation. As a temporary workaround, limit access to the internal activity feed database for all affected versions until a fix is provided.