CVE-2022-27599CWE-532

QVR Pro Client

Medium · published September 8, 2023

CVSS v3.1
6.7
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possibly provides local authenticated administrators with an additional, less-protected path to acquiring the information via unspecified vectors.

We have already fixed the vulnerability in the following version:

Windows 10 SP1, Windows 11, Mac OS, and Mac M1: QVR Pro Client 2.3.0.0420 and later

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00180 · 7.2th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2023-09-08T01:58Z
EPSS history
Timeline
  • 08 SEP 01:58Z
    QVR Pro Client
    cvelistv5