Lucene search
IcscertCVELIST:CVE-2022-2569HistoryAug 24, 2022 - 3:16 p.m.
CVE-2022-2569 ARC Informatique PcVue
2022-08-2415:16:15
CWE-312
icscert
www.cve.org
1
cve-2022-2569
arc informatique pcvue
sensitive information
cleartext
authenticated user
session data
oauth database
legitimate users
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
5.4
Confidence
High
EPSS
0
Percentile
10.4%
The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users
CNA Affected
[
{
"product": "PcVue 12 OAuth web service configuration",
"vendor": "ARC Informatique",
"versions": [
{
"lessThan": "12.0.27",
"status": "affected",
"version": "All",
"versionType": "custom"
}
]
},
{
"product": "PcVue 15 OAuth web service configuration",
"vendor": "ARC Informatique",
"versions": [
{
"status": "affected",
"version": "All"
}
]
}
]Related
cve
cve
CVE-2022-2569
2022-08-24 16:15:11
prion
prion
Information disclosure
2022-08-24 16:15:00
ics
ics
ARC Informatique PcVue (Update A)
2022-09-29 12:00:00
ARC Informatique PcVue
2022-08-23 12:00:00
nvd
nvd
CVE-2022-2569
2022-08-24 16:15:11
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
5.4
Confidence
High
EPSS
0
Percentile
10.4%
Related for CVELIST:CVE-2022-2569