Johnson Controls exacqVision Web Service Information Disclosure (JCI-PSA-2021-16)

Binary data exacqVisionwebservicecve-2021-27664.nbin...

CVE-2021-27664

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server...

CVE-2021-27664 exacqVision Web Service

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server...

CVE-2021-27664

CVE-2021-27664 affects Exacq Technologies exacqVision Web Service. Root cause: improper privilege management that could allow an unauthenticated remote user to access credentials stored on the exacqVision Server. Affected product/versions: exacqVision Web Service 21.06.11.0 or older. Impact: cred...