Threats tagged 'ghsa-wwmh-8g6m-hf8v'

A CWE-922 Insecure Storage of Sensitive Information vulnerability affects multiple Johnson Controls iSTAR Ultra product lines prior to version 6.9.2.CU02. This vulnerability allows file manipulation as described by CAPEC-15. The issue has a medium severity with a CVSS score of 6.3. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.