sysaid sysaid 授权机制不正确

CVE编号

CVE-2022-22798

利用情况

暂无

补丁情况

N/A

披露时间

2022-05-13

漏洞描述

Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control v20.4.74 b10, v22.1.20 b62, v22.1.30 b49 - An attacker needs to log in as a guest after that the system redirects him to the service portal or EndUserPortal.JSP, then he needs to change the path in the URL to /ConcurrentLogin%2ejsp after that he will receive an error message with a login button, by clicking on it, he will connect to the system dashboard. The attacker can receive sensitive data like server details, usernames, workstations, etc. He can also perform actions such as uploading files, deleting calls from the system.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://www.gov.il/en/departments/faq/cve_advisories

受影响软件情况

#	类型	厂商	产品	版本	影响面
1
	运行在以下环境
	应用	sysaid	sysaid	*		Up to (excluding) 21.1.50
	运行在以下环境
	应用	sysaid	sysaid	*		Up to (excluding) 22.1.64

CVSS3评分 8.8

• 攻击路径 网络
• 攻击复杂度 低
• 权限要求 低
• 影响范围 未更改
• 用户交互 无
• 可用性 高
• 保密性 高
• 完整性 高

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-ID	漏洞类型
CWE-863	授权机制不正确
NVD-CWE-Other

Exp相关链接

- avd.aliyun.com