CVE-2024-32931

Summary

Under certain circumstances the exacqVision Web Service can expose authentication token details within communications.

Affected Software

Weaknesses

• CWE-598: CWE-598 - Use of GET Request Method With Sensitive Query Strings

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-06

• ←Previous
• Next→