Description
Under certain circumstances the session token is not cleared on logout.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Johnson Controls | Metasys | All 10 versions – < 10.1.5, All 11 versions – < 11.0.2 | 10.1.5 |
Advisories 1
- ICSA-22-104-02 Johnson Controls Metasys CISA ICS & IT advisories · Apr 14, 2022
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories
- ICS-CERT Advisory third-party-advisory