CVE-2022-21940 in System Configuration Tool信息

摘要

由 VulDB • 2026-05-29

Johnson Controls System Configuration Tool (SCT) 版本 14（低于 14.2.3）和版本 15（低于 15.0.3）中 HTTPS 会话中的敏感 Cookie 缺少 'Secure' 属性漏洞，可能导致 Cookie 被访问。

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

Johnson Controls

预定

披露

管理

条目

CPE

CWE

CWE-614 (已确认)

CVSS

EPSS

KEV

活动

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2022-21940
NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-21940
CVE Details	https://www.cvedetails.com/cve/CVE-2022-21940/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!