CVE-2022-2569CWE-312

ARC Informatique PcVue

Medium · published August 24, 2022

CVSS v3.1
5.5
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00137 · 2.9th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2022-08-24T15:16Z
EPSS history
Timeline
  • 24 AUG 15:16Z
    ARC Informatique PcVue
    cvelistv5