Under certain circumstances the exacqVision Web Service can expose authentication token details within communications.
Weakness
The web application uses the HTTP GET method to process a request and includes sensitive information in the query string of that request.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Exacqvision_web_service | Johnsoncontrols | * | 24.03 (including) |