CVE-2024-12057 — User credentials recorded in log files

CVE-2024-12057

User credentials recorded in log files PUBLISHED

Description (CNA)

User credentials (login & password) are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with that of the PcVue Web back end. By exploiting this vulnerability, an attacker could retrieve the credentials of a user by accessing the Log File. Successful exploitation of this vulnerability could lead to unauthorized access to the application.

Affected (CNA)

Vendor / product	Versions
arcinfo / PcVue	affected 16.0.0 before 16.2.4; affected 15.0.0 before 15.2.11

CWE

CWE-532

References

https://www.pcvue.com/security/#SB2024-6

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.