PT-2024-17419 · Pcvue Web · Pcvue Web

Published 2024-12-09 · Updated 2024-12-09 · CVE-2024-12057

Positive Technologies (AI Summary)

CVSS v4.0

1.8

Low

Base vector

AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/AU:N/R:U/V:C/RE:M/U:Clear

Name of the Vulnerable Software and Affected Versions PcVue Web (affected versions not specified)

Description The issue occurs when a user attempts to authenticate using an incompatible Web client version with the PcVue Web back end, resulting in user credentials (login and password) being inserted into log files. An attacker could exploit this by accessing the log file to retrieve user credentials, potentially leading to unauthorized application access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2024-12057

Affected Products

Pcvue Web

References · 4

• https://pcvue.com/security/#SB2024-6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-12057 · Security Note
• https://t.me/cvedetector/12444 · Telegram Post
• https://twitter.com/CVEnew/status/1866202697617326199 · Twitter Post