CVE-2020-26869CWE-200

ARC Informatique PcVue Exposure of Sensitive Information to an Unauthorized Actor

High · published October 12, 2020

CVSS v3.1
7.5
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

ARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unauthorized users to access session data of legitimate users. This issue also affects third-party systems based on the Web Services Toolkit.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01668 · 76.6th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2020-10-12T13:52Z
EPSS history
Timeline
  • 12 OCT 13:52Z
    ARC Informatique PcVue Exposure of Sensitive Information to an Unauthorized Actor
    cvelistv5