CVE-2020-10569: SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack.

Security readout for executives and security teams

SysAid On-Premise 20.1.11 reportedly exposes an AJP service by default and allows unauthenticated file uploads. The source says those behaviors can be chained with GhostCat to execute commands on the system. That makes internet-exposed or broadly reachable SysAid servers a serious operational risk, but the bundle does not provide CVSS, a confirmed fix, or evidence of active exploitation. Most relevant exposure is self-hosted SysAid On-Premise 20.1.11, especially where the AJP port is reachable from untrusted networks or upload paths are unauthenticated. The bundle lists no CPEs or broader affected-version range. Prioritize assessment for any internet-facing SysAid server. The business risk is potential server command execution against an IT service-management platform, but urgency should be balanced against incomplete public remediation and exploitation evidence in the provided sources. Mitigation focus: Inventory SysAid On-Premise deployments and confirm whether 20.1.11 is present.; Review SysAid 20.2 release notes and current vendor guidance for remediation status.; Restrict AJP access to trusted hosts only if vendor guidance supports it..

Prepared

Jun 5, 2026, 14:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.