Advisories · Technology
Johnson Controls System Configuration Tool (SCT).
Every CVE that names Johnson Controls System Configuration Tool (SCT) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT)
- Johnson Controls System Configuration Tool (SCT)
- CWE-614
- CVSS 7.5 High
Sensitive cookie without 'HttpOnly' flag in System Configuration Tool (SCT)
- Johnson Controls System Configuration Tool (SCT)
- CWE-1004