Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to disable anonymous user registration only hides the client-side registration form. An attacker can still post registration data to create new accounts without prior authentication.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sysaid Technologies SysAid 访问控制错误漏洞
Vulnerability Description
Sysaid Technologies SysAid是以色列SysAid Technologies（Sysaid Technologies）公司的一套IT服务管理解决方案。 Sysaid Technologies SysAid ITIL存在安全漏洞，该漏洞源于在SysAid ITIL 20.4.74 b10中发现一个问题。enduserreg端点用于匿名注册最终用户，但不尊重服务器端设置(该设置决定是否允许匿名用户注册新帐户)。将服务器端设置配置为禁用匿名用户注册只会隐藏客户端注册表单。攻击者可利用该漏洞
CVSS Information
N/A
Vulnerability Type
N/A