Description
The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ARC Informatique | PcVue 12 OAuth web service configuration | All – < 12.0.27 | 12.0.27 |
| ARC Informatique | PcVue 15 OAuth web service configuration | All | — |
Advisories 1
- ICSA-22-235-01 ARC Informatique PcVue (Update A) CISA ICS & IT advisories · Sep 29, 2022