NetSight
medium4.4

CVE-2021-36721

Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LD…

Impact

Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LDAP server.

Affected products

VendorProductAffected versions
SysaidApplication Programming Interface
before 21.3.60

References