Vulnerability in Arcinfo Pcvue

CVE-2024-12056

The Client secret is not checked when using the OAuth Password grant type. By exploiting this vulnerability, an attacker could connect to a web server using a client application not explicitly authorized as part of the OAuth deployment. E…

EPSS: 0.001 (16.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References