CVE-2020-9046

CVE-2020-9046 affects all versions of Johnson Controls Kantech EntraPass Editions. The vulnerability ( Improper Access Control CWE-284 ) could allow an authorized, low-privileged user to achieve full system-level privileges by replacing critical files with crafted ones. Affected editions include ...

CVE-2021-36198

CVE-2021-36198 affects Johnson Controls’ Entrapass (security management software). The connected sources show an information disclosure vulnerability where an unauthorized actor could access potentially sensitive data. Affected products: Entrapass, all versions prior to 8.40. The issue is modeled...