Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-24gc-rw47-8xrm

Опубликовано: 29 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 5

Описание

An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions prior to 6.5 may be abused by an authenticated local attacker to gather credential information which is processed by the PVI client application. The logging function of the PVI client application is disabled by default and must be explicitly enabled by the user.

An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions prior to 6.5 may be abused by an authenticated local attacker to gather credential information which is processed by the PVI client application. The logging function of the PVI client application is disabled by default and must be explicitly enabled by the user.

EPSS

Процентиль: 2%
0.00013
Низкий

5.1 Medium

CVSS4

5 Medium

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 5
nvd
9 дней назад

An Insertion of Sensitive Information into Log File vulnerability in B&R PVI client versions prior to 6.5 may be abused by an authenticated local attacker to gather credential information which is processed by the PVI client application. The logging function of the PVI client application is disabled by default and must be explicitly enabled by the user.

EPSS

Процентиль: 2%
0.00013
Низкий

5.1 Medium

CVSS4

5 Medium

CVSS3

Дефекты

CWE-532