VULNERABILITY INTELLIGENCE
CVE-2024-12057
EPSS probability0.14%
CISA KEVNot currently listed
Published2024-12-09
Last modified2026-06-17
Description
User credentials (login & password) are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with that of the PcVue Web back end. By exploiting this vulnerability, an attacker could retrieve the credentials of a user by accessing the Log File. Successful exploitation of this vulnerability could lead to unauthorized access to the application.
Weakness classification
- 87c8e6ad-f0f5-4ca8-89e2-89f26d6ed932: CWE-532