← Back to CVE List

CVE-2022-23856

Published: 2022-01-24T02:15Z
Last Modified: 2024-11-21T06:49Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An attacker can enumerate users by changing the id parameter, such as for the ECM/maintenance/forgotpasswordstep1 URI. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt