PT-2020-16522 · Arc Informatique · Pcvue+1

CVE-2020-26868

·

Published

2020-10-12

·

Updated

2026-07-09

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ARC Informatique PcVue versions prior to 12.0.17
Description The issue allows an unauthorized user to modify information used to validate messages sent by legitimate web clients, leading to a denial-of-service attack. This problem also affects third-party systems based on the Web Services Toolkit.
Recommendations For versions prior to 12.0.17, update to version 12.0.17 or later to resolve the issue. As a temporary workaround, consider restricting access to the Web Services Toolkit to minimize the risk of exploitation.

Fix

DoS

Exposure of Resource to Wrong Sphere

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2020-26868

Affected Products

Pcvue
Web Services Toolkit