Lucene search
HistoryAug 24, 2022 - 4:15 p.m.
CVE-2022-2569
device
sensitive information
cleartext
authenticated user
session data
oauth database
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
10.4%
The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users
Affected configurations
Node
arcinformatiquepcvueRange<12.0.27
ORarcinformatiquepcvueRange15–15.2.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| arcinformatique | pcvue | * | cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-2569 ARC Informatique PcVue
2022-08-24 15:16:15
cve
cve
CVE-2022-2569
2022-08-24 16:15:11
prion
prion
Information disclosure
2022-08-24 16:15:00
ics
ics
ARC Informatique PcVue (Update A)
2022-09-29 12:00:00
ARC Informatique PcVue
2022-08-23 12:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
10.4%
Related for NVD:CVE-2022-2569