← Back

CVE-2020-26869

nvd nist
Published: Oct 12, 2020Modified: Jul 9, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

ARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unauthorized users to access session data of legitimate users. This issue also affects third-party systems based on the Web Services Toolkit.

Affected (1)

Products: Arcinfo: Pcvue
Arcinfo
1 product
Pcvue
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Pcvue
From 8.10 to 12.0.17

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (8)

Source: vulnerability@kaspersky.com
Broken Link
Source: vulnerability@kaspersky.com
Third Party AdvisoryUS Government Resource
Source: vulnerability@kaspersky.com
Vendor Advisory
Source: vulnerability@kaspersky.com
Permissions RequiredVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions RequiredVendor Advisory

Timeline

No history available yet.