CVE-2013-6945

2022-10-0316:14:51

mitre

www.cve.org

osehra vista

m2m broker

unauthorized access

patient records

logic flaw

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.6%

JSON

The M2M Broker in OSEHRA VistA, as distributed before September 30, 2013, allows attackers to bypass authentication and authorization to perform doctor-only actions and read or modify patient records via unspecified vectors related to a “logic flaw.”