Johnson Controls System Configuration Tool (SCT)

• CVE-2022-21940 High 7.5 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT) 0.4%
• CVE-2022-21939 High 7.5 Sensitive cookie without 'HttpOnly' flag in System Configuration Tool (SCT) 0.5%