The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included.
Weakness
The Secure attribute for sensitive cookies in HTTPS sessions is not set.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pcvue | Arcinformatique | 12.0.0 (including) | 15.2.13 (including) |
| Pcvue | Arcinformatique | 16.0.0 (including) | 16.3.4 (excluding) |