CVE-2020-26868

Katalog CVE

CVSS 7.5 · High EPSS 2,2%

Kerentanan Access to Critical Private Variable via Public Method pada arcinfo pcvue. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify information used to validate messages sent by legitimate web clients. This issue also affects third-party systems based on the Web Services Toolkit.

Rincian

Terbit di NVD

12 Oktober 2020

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-767: Access to Critical Private Variable via Public Method
CWE-668: Exposure of Resource to Wrong Sphere

EPSS (30 hari)

2,2% peluang dieksploitasi; lebih tinggi dari 81,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.pcvuesolutions.com/security advisory vendor
• https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1076-security-bulletin-2020-1 permissions required · advisory vendor
• https://us-cert.cisa.gov/ics/advisories/icsa-20-308-03 advisory pihak ketiga · pemerintah AS
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2020/10/09/klcert-20-016-denial-of-service-in-arc-... broken link