CVE-2020-26869

概要

参考情報

• ics-cert.kaspersky.com/advisories/klcert-advisories/2020/10/09/klcert-20-017-session-information-exposure-in-arc-informatique-pcvue · Broken Link
• us-cert.cisa.gov/ics/advisories/icsa-20-308-03 · Third Party Advisory
• pcvuesolutions.com/security · Vendor Advisory
• pcvuesolutions.com/support/index.php/en/security-bulletin/1076-security-bulletin-2020-1 · Permissions Required

pcvue のその他の脆弱性

• CVE-2026-14868中 5.5The encryption algorithm used to protect the configuration of user accounts, stored in the built-in user directory of PcVue projects, all ve…
• CVE-2026-14867中 5.5Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.0. A local attacker …
• CVE-2026-1698中 6.1A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, …
• CVE-2026-1697中 6.5The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.…
• CVE-2026-1696中 6.1Some HTTP security headers are not properly set by the web server when sending responses to the client application.