cveboard RSS feed

CVE-2019-7589

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2019
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Kantech EntraPass Improper Input Validation

A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system level privileges. This affects Johnson Controls' Kantech EntraPass Corporate Edition versions 8.0 and prior; Kantech EntraPass Global Edition versions 8.0 and prior.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Kantech EntraPass Corporate Edition

Vendor
Johnson Controls
Product
Kantech EntraPass Corporate Edition
Platforms
Unknown
Default status
Unknown
Kantech EntraPass Corporate Edition · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
versions 8.0 and prioraffectedUnavailableUnavailableUnavailableNone listed

Kantech EntraPass Global Edition

Vendor
Johnson Controls
Product
Kantech EntraPass Global Edition
Platforms
Unknown
Default status
Unknown
Kantech EntraPass Global Edition · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
versions 8.0 and prioraffectedUnavailableUnavailableUnavailableNone listed