Johnson Controls C-CURE 9000 and Victor log files expose OS credentials
Account details left in a security program's logs can be taken.
Summary
Sensitive information is written into log files, letting an attacker use known operating system credentials. Version 3.20 is affected.
What to do
We have not confirmed a fixed version yet. Check the source links below.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen