Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Johnson Controls OpenBlue Enterprise Manager Data Collector 3.2.5.75 Clear all filters
TI-2023-01901 CVE-2023-2024 · GHSA-7xm7-wx38-9fm4

Improper Authentication for OpenBlue Enterprise Manager Data Collector

Priority MEDIUM 51

Improper authentication in OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 allow access to an unauthorized user under certain circumstances.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01086 Published 2023-05-18 Fixed in 3.2.5.75 CWE-287