CVE-2022-2569

The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-01-0	Patch Third Party Advisory US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-01-0	Patch Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:arcinfo:pcvue::::::::
	cpe:2.3:a:arcinfo:pcvue::::::::

History

09 Jul 2026, 18:32

Type	Values Removed	Values Added
CPE	cpe:2.3:a:arcinformatique:pcvue::::::::	cpe:2.3:a:arcinfo:pcvue::::::::
First Time		Arcinfo pcvue Arcinfo

21 Nov 2024, 07:01

Type	Values Removed	Values Added
References	~~() https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-01-0 - Patch, Third Party Advisory, US Government Resource~~	() https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-01-0 - Patch, Third Party Advisory, US Government Resource

Information

Published : 2022-08-24 16:15

Updated : 2026-07-09 18:32

NVD link : CVE-2022-2569

Mitre link : CVE-2022-2569

CVE.ORG link : CVE-2022-2569

JSON object : View

Products Affected

arcinfo

pcvue

CWE

CWE-312

Cleartext Storage of Sensitive Information

{"id": "CVE-2022-2569", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2022-2569", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-16T15:50:26.795107Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "ics-cert@hq.dhs.gov", "affectedData": [{"vendor": "ARC Informatique", "product": "PcVue 12 OAuth web service configuration", "versions": [{"status": "affected", "version": "All", "lessThan": "12.0.27", "versionType": "custom"}]}, {"vendor": "ARC Informatique", "product": "PcVue 15 OAuth web service configuration", "versions": [{"status": "affected", "version": "All"}]}]}], "published": "2022-08-24T16:15:11.907", "references": [{"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-01-0", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-01-0", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-312"}]}], "descriptions": [{"lang": "en", "value": "The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users"}, {"lang": "es", "value": "El dispositivo afectado almacena informaci\u00f3n confidencial en texto sin cifrar, lo que puede permitir a un usuario autenticado acceder a los datos de sesi\u00f3n almacenados en la base de datos OAuth que pertenecen a usuarios leg\u00edtimos"}], "lastModified": "2026-07-09T18:32:08.463", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:arcinfo:pcvue:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE8E62FB-E716-46E8-9E8B-BFCF5E6167BA", "versionEndExcluding": "12.0.27"}, {"criteria": "cpe:2.3:a:arcinfo:pcvue:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9D949F2-C563-4FB4-A39E-D03024E82411", "versionEndIncluding": "15.2.2", "versionStartIncluding": "15"}], "operator": "OR"}]}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}