Pcvue Security Vulnerabilities

CVE-2022-2569

The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users

CVE-2022-4311

An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. Thiscould allow a user with access to the log files to discover connection strings of data sources configured for theDbConnect, which could include credentials. Successful exploitation of t...

CVE-2022-4312

A cleartext storage of sensitive information vulnerability exists in PcVue versions 8.10 through 15.2.3. This couldallow an unauthorized user with access the email and short messaging service (SMS) accounts configuration filesto discover the associated simple mail transfer protocol (SMTP) account c...