Vulnerabilities > CVE-2022-23856 - Authorization Bypass Through User-Controlled Key vulnerability in Saviynt Enterprise Identity Cloud
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An attacker can enumerate users by changing the id parameter, such as for the ECM/maintenance/forgotpasswordstep1 URI.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |