Critical XML External Entity Vulnerability Discovered in SysAid On-Prem

What changed

An improper restriction of XML External Entity (XXE) vulnerability has been uncovered in SysAid On-Prem software, specifically in its Server URL processing feature. This flaw could be exploited by attackers to gain unauthorized administrator access and read sensitive files.

Who is affected

The vulnerability impacts various users and organizations utilizing SysAid On-Prem software, particularly those running versions 23.3.40 and earlier.

This includes IT departments, service management teams, and any businesses relying on SysAid for their operational needs.

• Organizations using SysAid On-Prem versions <= 23.3.40
• IT service management teams employing SysAid solutions
• Businesses with sensitive data managed through SysAid
• Any entity that has not yet updated to the latest version of SysAid

What to do

It is crucial for affected users to take immediate action by updating their SysAid On-Prem installations to the latest version. Regular security assessments and monitoring should also be implemented to mitigate potential risks.

Users should review their security protocols and ensure that all software is kept up to date to protect against similar vulnerabilities in the future.

• Update SysAid On-Prem to the latest version immediately
• Conduct a security audit to identify any potential exposures
• Implement regular software updates and security patches
• Educate staff on the importance of cybersecurity best practices