CVE-2024-12057

LOW

PcVue 15.0.0-15.2.10 and 16.0.0-16.2.3 - Sensitive Information Disclosure in Log Files

Title source: llm

Description

User credentials (login & password) are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with that of the PcVue Web back end. By exploiting this vulnerability, an attacker could retrieve the credentials of a user by accessing the Log File. Successful exploitation of this vulnerability could lead to unauthorized access to the application.

References (1)

Core 1

Core References

Various Sources vendor-advisory

https://www.pcvue.com/security/#SB2024-6

Scores

CVSS v4 1.8

EPSS 0.0013

EPSS Percentile 3.2%

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/AU:N/R:U/V:C/RE:M/U:Clear

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-532

Status published

Products (2)

arcinfo/PcVue 15.0.0 - 15.2.11

arcinfo/PcVue 16.0.0 - 16.2.4

Published Dec 09, 2024

Tracked Since Feb 18, 2026