ARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unauthorized users to access session data of legitimate users. This issue also affects third-party systems based on the Web Services Toolkit.
References
Link | Resource |
---|---|
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2020/10/09/klcert-20-017-session-information-exposure-in-arc-informatique-pcvue/ | Broken Link |
https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 | Third Party Advisory US Government Resource |
https://www.pcvuesolutions.com/security | Vendor Advisory |
https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1076-security-bulletin-2020-1 | Permissions Required Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Kaspersky
Published: 2020-11-03T00:00:00
Updated: 2021-01-11T15:15:21
Reserved: 2020-10-07T00:00:00
Link: CVE-2020-26869
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-10-12T14:15:12.403
Modified: 2021-10-19T12:03:38.770
Link: CVE-2020-26869
JSON object: View
Redhat Information
No data.