09 Dec 2022

CVE-2022-38765

6.5 Medium Severity

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter.

suggest your own:

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Apps (0)

Operating Systems (0)

xtranslations

xdetection

xremediation

Comments (0)