SB2023010317 - Multiple vulnerabilities in ARC Informatique PcVue

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Cleartext storage of sensitive information (CVE-ID: CVE-2022-4312)

The vulnerability allows a local attacker to gain access to potentially sensitive information.

The vulnerability exists due to cleartext storage of sensitive information. A local user can access to the underlying email account and SIM card.

2) Inclusion of Sensitive Information in Log Files (CVE-ID: CVE-2022-4311)

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to software stores sensitive information into log files. A local user can read the log files and gain access to sensitive data.

Remediation

Install update from vendor's website.

References

• https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1171-security-bulletin-2022-7
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-354-03
• https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1165-security-bulletin-2022-6