In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials.

Published Nov 1, 2021 · Updated Aug 4, 2024 · Assigned by mitre