CVE-2022-21940 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT)

[
  {
    "defaultStatus": "unaffected",
    "product": "System Configuration Tool (SCT)",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "14.2.3",
        "status": "affected",
        "version": "14",
        "versionType": "custom"
      },
      {
        "lessThan": "15.0.3",
        "status": "affected",
        "version": "15",
        "versionType": "custom"
      }
    ]
  }
]