On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI.
Affected Platforms
Johnsoncontrols Metasys Extended Application And Data ServerJohnsoncontrols Metasys For Validated Environments