CVE-2020-26868 HIGH

CVE-2020-26868: ARC Informatique PcVue Access to Critical Private Variable via Public Method

Vendor Arc Informatique
Product PcVue
Weakness CWE-767
Published October 12, 2020
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify information used to validate messages sent by legitimate web clients. This issue also affects third-party systems based on the Web Services Toolkit.

Key dates

02Disclosure timeline

October 12, 2020 CVE published
September 17, 2024 Record updated