CVE-2024-12057

published 2024-12-09

CVE-2024-12057: User credentials (login & password) are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with…

Priority P4 11 low 1.8 CVSS 4.0

AV L AC H AT P PR H UI N VC L VI L VA N SC L SI L SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU N R U V C RE M U Clear

User credentials (login & password) are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with that of the PcVue Web back end.
By exploiting this vulnerability, an attacker could retrieve the credentials of a user by accessing the Log File. Successful exploitation of this vulnerability could lead to unauthorized access to the application.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
arcinfo	pcvue	>= 15.0.0 < 15.2.11	15.2.11
arcinfo	pcvue	>= 16.0.0 < 16.2.4	16.2.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-532