C Cure WEB

DATE	CVE	VULNERABILITY TITLE	RISK
2020-11-19	CVE-2020-9049	Improper Authentication vulnerability in Johnsoncontrols C-Cure web and Victor web A vulnerability in specified versions of American Dynamics victor Web Client and Software House C•CURE Web Client could allow an unauthenticated attacker on the network to create and sign their own JSON Web Token and use it to execute an HTTP API Method without the need for valid authentication/authorization. high complexity johnsoncontrols CWE-287	5.3