CVE-2026-71455

Published: Ott 26, 2026 Last Modified: Ott 26, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,3
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: high
User Interaction: active
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data.

This issue affects Kantech Entrapass: before 9.20.

316

Cleartext Storage of Sensitive Information in Memory

Draft
Abstraction: Variant Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality
Potential Impacts:
Read Memory
Applicable Platforms
All platforms may be affected
View CWE Details
https://www.johnsoncontrols.com/trust-center/cybersecurity/…
https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories