CVE-2020-26869highCWE-200

ARC Informatique PcVue Exposure of Sensitive Information to an Unauthorized Actor

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.7%

probabilidade de exploração

1.7%top 26% das CVEs

exploração observada

nãonenhuma fonte reporta

ARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unauthorized users to access session data of legitimate users. This issue also affects third-party systems based on the Web Services Toolkit.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Produtos afetados

ARC Informatique · PcVue

Referências

https://ics-cert.kaspersky.com/advisories/klcert-advisories/2020/10/09/klcert-20-017-session-information-exposure-in-arc-informatique-pcvue/https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 https://www.pcvuesolutions.com/security https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1076-security-bulletin-2020-1