CVE-2022-21939
7.5HIGHSensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie.
게시됨: 2/9/2023업데이트됨: 11/21/2024
설명
Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie.
AI 분석AI 기반
영향받는 제품
johnsoncontrolsmetasys_system_configuration_tool
johnsoncontrolsmetasys_system_configuration_tool
참조
- https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-03Third Party AdvisoryUS Government ResourceVDB Entry
- https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesVendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-03Third Party AdvisoryUS Government ResourceVDB Entry
- https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesVendor Advisory