PT-2021-21325 · Sysaid · Sysaid

Published 2021-12-14 · Updated 2022-07-12 · CVE-2021-36721

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sysaid versions prior to 21.3.60

Description The issue allows an attacker to send requests to a specific API path without authorization, potentially obtaining user names from the LDAP server.

Recommendations For versions prior to 21.3.60, update to version 21.3.60 or later to resolve the issue.

Fix

Related Identifiers

CVE-2021-36721

Affected Products

Sysaid

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-36721 · Security Note
• https://osv.dev/vulnerability/CVE-2021-36721 · Vendor Advisory
• https://t.me/cibsecurity/33925 · Telegram Post
• https://gov.il/en/departments/faq/cve_advisories · Note