← Database

CVE-2023-2024

CRITICAL CVSS: 10.0 Published: 2023-05-18 Modified: 2026-06-17

Description

Improper authentication in OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 allow access to an unauthorized user under certain circumstances.

Affected Platforms

Johnsoncontrols Openblue Enterprise Manager Data Collector

Weakness Type

CWE-287, CWE-287

References