PT-2022-15892 · Sysaid · Sysaid

Published 2022-05-12 · Updated 2022-05-23 · CVE-2022-23165

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sysaid version 14.2.0

Description The parameter helpPageName used by the page "/help/treecontent.jsp" suffers from a Reflected Cross-Site Scripting issue. To exploit this, the affected product must expose the Offline Help Pages. An attacker may gain access to sensitive information or execute client-side code in the browser session of the victim user by requiring the victim to open a malicious link. This can be used to perform phishing attacks, allowing the attacker to receive sensitive data like server details, usernames, workstations, etc., and perform actions such as uploading files or deleting calls from the system.

Recommendations For Sysaid version 14.2.0, as a temporary workaround, consider restricting access to the /help/treecontent.jsp page and avoiding the use of the helpPageName parameter until a patch is available. Additionally, ensure that Offline Help Pages are not exposed to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-23165

Affected Products

Sysaid

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-23165 · Security Note
• https://osv.dev/vulnerability/CVE-2022-23165 · Vendor Advisory
• https://t.me/cibsecurity/42559 · Telegram Post
• https://gov.il/en/departments/faq/cve_advisories · Note