← Database

CVE-2022-21934

HIGH CVSS: 8.0 Published: 2022-05-06 Modified: 2026-06-17

Description

Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS server 11 versions prior to 11.0.2.

Affected Platforms

Johnsoncontrols Metasys Extended Application And Data ServerJohnsoncontrols Metasys Application And Data ServerJohnsoncontrols Metasys Open Application Server

Weakness Type

CWE-620, CWE-287

References