Medium severity4.4NVD Advisory· Published Dec 14, 2021· Updated Jun 17, 2026

CVE-2021-36721

Description

Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LDAP server.

Affected products

Sysaid/Application Programming Interface
cpe:2.3:a:sysaid:application_programming_interface:*:*:*:*:*:*:*:*
Range: <21.3.60
Sysaid/Sysaidllm-fuzzy2 versions
<21.3.60+ 1 more
- (no CPE)range: <21.3.60
- (no CPE)range: Sysaid â€“ version 20.4.74 20.4.74

Patches

Vulnerability mechanics

References

www.gov.il/en/departments/faq/cve_advisoriesnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.286
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000