Pcvuesolutions Pcvue vulnerabilities

CVE-2020-26867 [CRITICAL] CWE-502 CVE-2020-26867: ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untruste ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.

CVE-2020-26869 [HIGH] CWE-200 CVE-2020-26869: ARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unau ARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unauthorized users to access session data of legitimate users. This issue also affects third-party systems based on the Web Services Toolkit.

CVE-2020-26868 [HIGH] CWE-767 CVE-2020-26868: ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to t ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify information used to validate messages sent by legitimate web clients. This issue also affects third-party systems based on the Web Services Toolkit.