Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-3127

Improper Authentication in iSTAR

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jci

Description

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sensormatic Electronics, a subsidiary of Johnson Controls, Inc. iSTAR Ultra

Default version status: unaffected

  • >6.8.6 to < 6.9.2 CU01affected

Sensormatic Electronics, a subsidiary of Johnson Controls, Inc. iSTAR Ultra LT

Default version status: unaffected

  • >6.8.6 to < 6.9.2 CU01affected

Sensormatic Electronics, a subsidiary of Johnson Controls, Inc. iSTAR Ultra G2

Default version status: unaffected

  • 0 to < 6.9.2 CU01affected

Sensormatic Electronics, a subsidiary of Johnson Controls, Inc. iSTAR Edge G2

Default version status: unaffected

  • 0 to < 6.9.2 CU01affected

References