← Database

CVE-2021-36203

MEDIUM CVSS: 5.3 Published: 2022-04-22 Modified: 2026-06-17

Description

The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially crafted request.

Affected Platforms

Johnsoncontrols Metasys System Configuration Tool

Weakness Type

CWE-918, CWE-918

References