medium5.3
CVE-2022-23856
An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x.
Impact
An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An attacker can enumerate users by changing the id parameter, such as for the ECM/maintenance/forgotpasswordstep1 URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Saviynt | Enterprise Identity Cloud | All versions |