CVE-2021-44875 - CVE House
Back to Database
Status published Medium CVE-2021-44875

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User...

Vulnerability Description

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. This issue occurs during the password recovery procedure for a given user, where a difference in messages could allow an attacker to determine if the given user is valid or not, enabling a brute force attack with valid users.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-44875

Credits & Attribution

No credits recorded in the NVD database.

References

More from dalmark

View All →
CVE-2021-44877
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect...
High 7.5
CVE-2021-44876
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User...
Medium 5.3
CVE-2021-44874
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure...
High 8.8

Affected Vendor

Affected Software

systeam enterprise resource planning
Vulnerable Versions:
2.22.8

Timeline

Official Publish: December 21st, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.