Description
Under certain circumstances a CCURE Portal user could enumerate user accounts in CCURE 9000 version 2.90 and prior versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Johnson Controls | C•CURE 9000 | 2.90 and ealier – ≤ 2.90 | — |
Advisories 1
- ICSA-22-284-03 Sensormatic Electronics C-CURE 9000 CISA ICS & IT advisories · Oct 11, 2022
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories
- ICS-CERT Advisory third-party-advisory