Description
The Access Control Bypass vulnerability found in ALC WebCTRL and Carrier i-Vu in versions up to and including 8.5 allows a malicious actor to bypass intended access restrictions and expose sensitive information via the
web based building automation server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Automated Logic | WebCTRL | ≤ 8.5 | — |
| Carrier | i-Vu | ≤ 8.5 | — |