critical9.8
CVE-2022-23855
An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x.
Impact
An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An authentication bypass in ECM/maintenance/forgotpasswordstep1 allows an unauthenticated user to reset passwords and login as any local account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Saviynt | Enterprise Identity Cloud | All versions |