NetSight
high8.1

CVE-2021-36205

Under certain circumstances the session token is not cleared on logout.

Impact

Under certain circumstances the session token is not cleared on logout.

Affected products

VendorProductAffected versions
JohnsoncontrolsMetasys Application And Data Server
from 10.0 before 10.1.5
from 11.0 before 11.0.2
JohnsoncontrolsMetasys Extended Application And Data Server
from 10.0 before 10.1.5
from 11.0 before 11.0.2
JohnsoncontrolsMetasys Open Application Server
from 10.0 before 10.1.5
from 11.0 before 11.0.2

Weakness classification

References