Under certain circumstances the session token is not cleared on logout.
Weakness
The product does not properly “clean up” and remove temporary or supporting resources after they have been used.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Metasys_application_and_data_server | Johnsoncontrols | 10.0 (including) | 10.1.5 (excluding) |
| Metasys_application_and_data_server | Johnsoncontrols | 11.0 (including) | 11.0.2 (excluding) |
| Metasys_extended_application_and_data_server | Johnsoncontrols | 10.0 (including) | 10.1.5 (excluding) |
| Metasys_extended_application_and_data_server | Johnsoncontrols | 11.0 (including) | 11.0.2 (excluding) |
| Metasys_open_application_server | Johnsoncontrols | 10.0 (including) | 10.1.5 (excluding) |
| Metasys_open_application_server | Johnsoncontrols | 11.0 (including) | 11.0.2 (excluding) |