Lucene search

K
cvelistMitreCVELIST:CVE-2022-38765
HistoryDec 08, 2022 - 12:00 a.m.

CVE-2022-38765

2022-12-0800:00:00
mitre
www.cve.org
canon medical
informatics
vitrea vision
access control
imaging records
tampering

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter.

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

Related for CVELIST:CVE-2022-38765