← Vulnerability feed

Vulnerability record · CVE-2022-4311 · published 12 December 2022

CVE-2022-4311: Arcinfo pcvue sensitive information in log file vulnerability

Arcinfo · Pcvue

An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This could allow a user with access to the log files to discover connection strings of data sources configured for the DbConnect, which could include credentials. Successful exploitation of this vulnerability could allow other users unauthorized access to the underlying data sources.

6.5 CVSS 3.1 Medium EPSS 0.34% · top 75.0% CWE-532 · Sensitive information in log file
6.5CVSS 3.1 base score
0.34%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
9 Jul 2026Last modified by NVD

Description

An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This could allow a user with access to the log files to discover connection strings of data sources configured for the DbConnect, which could include credentials. Successful exploitation of this vulnerability could allow other users unauthorized access to the underlying data sources.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1165-security-bulletin-2022-6 Permissions RequiredVendor Advisory
https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1165-security-bulletin-2022-6 Permissions RequiredVendor Advisory

Track CVE-2022-4311 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-26867Arcinfo pcvue deserialization of untrusted data vulnerabilityARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely e…EPSS 3.8%9.3CVE-2011-4042Arcinfo frontvue vulnerabilityAn unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute a…EPSS 6.4%9.3CVE-2011-4043Arcinfo frontvue vulnerabilityInteger overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote at…EPSS 7.4%8.4CVE-2026-14868Arcinfo pcvue inadequate encryption strength vulnerabilityThe encryption algorithm used to protect the configuration of user accounts, stored in the built-in user directory of PcVue projects, all versions pr…EPSS 0.06%7.5CVE-2020-26868Arcinfo pcvue exposure of resource to wrong sphere vulnerabilityARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify info…EPSS 2.2%7.5CVE-2020-26869Arcinfo pcvue information exposure vulnerabilityARC Informatique PcVue prior to version 12.0.17 is vulnerable to information exposure, allowing unauthorized users to access session data of legitima…EPSS 1.7%6.8CVE-2026-14867Arcinfo pcvue vulnerabilityCredentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.0. A local attacker could ret…EPSS 0.13%5.8CVE-2011-4044Arcinfo frontvue vulnerabilityAn unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify fi…EPSS 27%

Source: NIST National Vulnerability Database (record CVE-2022-4311), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.