描述
Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie.
AI分析AI驱动
受影响产品
johnsoncontrolsmetasys_system_configuration_tool
johnsoncontrolsmetasys_system_configuration_tool
参考资料
- https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-03Third Party AdvisoryUS Government ResourceVDB Entry
- https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesVendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-03Third Party AdvisoryUS Government ResourceVDB Entry
- https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesVendor Advisory