An issue exists in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An authentication bypass in ECM/maintenance/forgotpasswordstep1 allows an unauthenticated user to reset passwords and login as any local account.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
saviynt enterprise identity cloud - |