vulnerability
Johnson Controls Simplex Incident Manager
Critical
Summary
A critical vulnerability in Johnson Controls Simplex Incident Manager allows a local attacker with low privileges to extract user credentials (passwords and authentication tokens) from system memory, potentially leading to unauthorized access to the application and connected systems. The vulnerability affects versions 2.01 and earlier, and Johnson Controls has released a patched version (v2.01.01).
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data