CVE-2022-2569 — ARC Informatique PcVue

CVE-2022-2569

ARC Informatique PcVue PUBLISHED

Description (CNA)

The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users

Affected (CNA)

Vendor / product	Versions
ARC Informatique / PcVue 12 OAuth web service configuration	affected All before 12.0.27
ARC Informatique / PcVue 15 OAuth web service configuration	affected All

CWE

CWE-312

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-01-0

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-01-0

CISA-ADP

No English description supplied.

No references supplied.