CVE-2022-2569

Published: Aug 24, 2022Modified: Jul 9, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users

Affected (2)

Products: Arcinfo: Pcvue

Arcinfo

1 product

Pcvue

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Arcinfo Pcvue	Before 12.0.27
Arcinfo Pcvue	From 15 to 15.2.2

Related CWEs

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (2)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-01-0

Source: ics-cert@hq.dhs.gov

PatchThird Party AdvisoryUS Government Resource

https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-01-0

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

Timeline

No history available yet.