Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information.

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information.

Johnson Controls OpenBlue Mobile Web Application for OpenBlue Workplace versions 2025.1.2 and prior are vulnerable to a Direct Request exploit that could allow an attacker to gain unauthorized access to sensitive information.