Full title: ECOA Building Automation System Cookie Poisoning / Authentication Bypass Vulnerabilities Category: web applications Platform: hardware ECOA building automation systems suffer from a cookie poisoning vulnerability that allows for authentication bypass. Many versions are affected. # 0day.today @ http://0day.today/