Skip to main content

Exacqvision Web Service CVE-2024-32931

MEDIUM
Use of GET Request Method With Sensitive Query Strings (CWE-598)
2024-08-01 productsecurity@jci.com
Information Disclosure Exacqvision Web Service
5.7
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.7 MEDIUM
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 01, 2024 - 22:15 nvd
MEDIUM 5.7

DescriptionNVD

Under certain circumstances the exacqVision Web Service can expose authentication token details within communications.

AnalysisAI

Under certain circumstances the exacqVision Web Service can expose authentication token details within communications. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-598. Under certain circumstances the exacqVision Web Service can expose authentication token details within communications. Affected products include: Johnsoncontrols Exacqvision Web Service.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Exacqvision Web Service

View all
CVE-2020-9047 HIGH POC
7.2 Jun 26

A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems runni
CVE-2021-27664 CRITICAL
9.8 Oct 11

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVisi
CVE-2024-32863 HIGH
8.8 Aug 01

Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF). Rated

CVE-2024-32862 HIGH
8.1 Aug 01

Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.

CVE-2024-32864 HIGH
8.1 Aug 01

Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS). Rated high seve
CVE-2021-27656 HIGH
7.5 Mar 18

A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-le
CVE-2021-27659 MEDIUM
6.1 Jun 24

exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input befo

Same weakness CWE-598 – Use of GET Request Method With Sensitive Query Strings

View all
CVE-2023-6014 CRITICAL POC
9.8
CVE-2025-56551 HIGH POC
8.2
CVE-2026-23846 HIGH POC
8.1
CVE-2026-26721 HIGH POC
7.1
CVE-2017-3185 CRITICAL
9.8
CVE-2025-69270 CRITICAL
9.8
CVE-2018-14822 CRITICAL
9.8
CVE-2025-51651 MEDIUM POC
5.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-32931 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy