Back to Database
Status published
Medium
CVE-2022-2569
ARC Informatique PcVue
Vulnerability Description
The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-2569
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- An unnamed researcher reported this vulnerability to ARC Informatique.
More from ARC Informatique
View All →CVE-2022-4312
A cleartext storage of sensitive information vulnerability exists in PcVue...
Medium
5.5
CVE-2022-4311
An insertion of sensitive information into log file vulnerability exists...
Medium
4.7
CVE-2020-26869
ARC Informatique PcVue Exposure of Sensitive Information to an Unauthorized Actor
High
7.5
CVE-2020-26868
ARC Informatique PcVue Access to Critical Private Variable via Public Method
High
7.5
CVE-2020-26867
ARC Informatique PcVue Deserialization of Untrusted Data
Critical
9.8
Affected Vendor
ARC Informatique
View all reports →Affected Software
PcVue 12 OAuth web service configuration, PcVue 15 OAuth web service configuration
Vulnerable Versions:
All
Timeline
Official Publish:
August 24th, 2022
Last Modified:
April 16th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N