An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An authentication bypass in ECM/maintenance/forgotpasswordstep1 allows an unauthenticated user to reset passwords and login as any local account.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.kb.cert.org/vuls/id/692873 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-01-24T01:43:48
Updated: 2024-08-03T03:51:45.997Z
Reserved: 2022-01-24T00:00:00
Link: CVE-2022-23855
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-01-24T02:15:06.793
Modified: 2024-11-21T06:49:22.143
Link: CVE-2022-23855
Redhat
No data.