Based on the description, it is inferred that a vulnerability exists in Key Systems Inc Global Facilities Management Software version 20230721a that could allow an unauthenticated or remote attacker to expose confidential data through the sid query parameter. The flaw permits the attacker to retrieve sensitive information without the need for credential disclosure, leading directly to a breach of confidentiality. The weakness is classified as Sensitive Information Exposure (CWE-598).

The affected product is Key Systems Inc Global Facilities Management Software, version 20230721a. No other products or versions were specifically listed as vulnerable.

The vulnerability carries a CVSS score of 7.1, indicating a high security impact. The Exploit Probability (EPSS) is less than 1%, suggesting that exploitation attempts are expected to be rare at present, and the flaw is not listed in the CISA Known Exploited Vulnerabilities catalog. Based on the description, it is inferred that if an attacker discovers a method to pass the sid parameter, they could obtain confidential information with minimal effort. The remote nature of the flaw and the potential for sensitive data leakage mean that, while unlikely to be widely exploited now, the impact of a successful attack would be significant.