Skip to content
OpenAdvisories
Low · 1.8 CVE-2024-12057 EUVD-2024-50562GHSA-f92c-vmwr-rmv8

User credentials recorded in log files

Published Dec 9, 2024 · Updated Mar 21, 2025 · Assigned by arcinfo

Description

User credentials (login & password) are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with that of the PcVue Web back end.
By exploiting this vulnerability, an attacker could retrieve the credentials of a user by accessing the Log File. Successful exploitation of this vulnerability could lead to unauthorized access to the application.

Affected products

VendorProductAffectedFixed
arcinfo PcVue 16.0.0 – < 16.2.4, 15.0.0 – < 15.2.11 16.2.4

References