Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-4311
HistoryDec 12, 2022 - 6:15 p.m.

Design/Logic Flaw

2022-12-1218:15:00
PRIOn knowledge base
www.prio-n.com
2
insertion sensitive information
log file
pcvue versions 15
unauthorized access
data sources
vulnerability

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.9%

An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This could allow a user with access to the log files to discover connection strings of data sources configured for the DbConnect, which could include credentials. Successful exploitation of this vulnerability could allow other users unauthorized access to the underlying data sources.

CPENameOperatorVersion
pcvuege15
pcvuele15.2.2

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.9%

Related for PRION:CVE-2022-4311