---
id: CVE-2022-4311
title: >-

  An insertion of sensitive information into log file vulnerability exists in
  PcVue versions 15 through 15.2.2
summary: >-

  An insertion of sensitive information into log file vulnerability exists in
  PcVue versions 15 through 15.2.2. This

  could allow a user with access to the log files to discover connection strings
  of data sources configured for the

  DbConne…
severity: medium
cvss: 4.7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-532
vendor: arcinfo
product: pcvue
affected:
  - 'pcvue >= 15, <= 15.2.2'
published: '2022-12-12'
updated: '2026-07-09'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-4311'
references:
  - url: >-
      https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1165-security-bulletin-2022-6
    label: ics-cert@hq.dhs.gov
  - url: >-
      https://www.pcvuesolutions.com/support/index.php/en/security-bulletin/1165-security-bulletin-2022-6
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.0034
epssPercentile: 0.24749
ingestedAt: '2026-07-10T01:55:22.862Z'
---

## Overview


An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This
could allow a user with access to the log files to discover connection strings of data sources configured for the
DbConnect, which could include credentials. Successful exploitation of this vulnerability could allow other users
unauthorized access to the underlying data sources.



## Affected

- `pcvue >= 15, <= 15.2.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.