Skip to content
OpenAdvisories
Medium · 5.0 CVE-2023-2025 EUVD-2023-33552GHSA-m2wx-725w-rmg7

Exposure of Sensitive Information in OpenBlue Enterprise Manager Data Collector

Published May 18, 2023 · Updated Feb 12, 2025 · Assigned by jci

Description

OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 may expose sensitive information to an unauthorized user under certain circumstances.

Affected products

VendorProductAffectedFixed
Johnson Controls OpenBlue Enterprise Manager Data Collector < 3.2.5.75 3.2.5.75

Advisories 1

References