Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2024-0912

CCURE passwords exposed to administrators

Description

Under certain circumstances the Microsoft® Internet Information Server (IIS) used to host the C•CURE 9000 Web Server will log Microsoft Windows credential details within logs. There is no impact to non-web service interfaces C•CURE 9000 or prior versions

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Johnson Controls Software House C•CURE 9000

Default version status: unaffected

  • 0 to ≤ 2.90affected

References