NetSight
high8.1

CVE-2022-21936

On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP …

Impact

On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI.

Affected products

VendorProductAffected versions
JohnsoncontrolsMetasys Extended Application And Data Server
Version 12.0

Weakness classification

References