Lucene search
PRIOn knowledge basePRION:CVE-2022-2272HistoryAug 03, 2022 - 4:15 p.m.
Authentication flaw
2022-08-0316:15:00
PRIOn knowledge base
www.prio-n.com
3
remote attackers
authentication bypass
sante pacs server
sql queries
vulnerability
nvd
This vulnerability allows remote attackers to bypass authentication on affected installations of Sante PACS Server 3.0.4. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the login endpoint. When parsing the username element, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-17331.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sante_pacs_server | eq | 3.0.4 |
Related
zdi
zdi
Sante PACS Server SQL Injection Authentication Bypass Vulnerability
2022-07-07 00:00:00
nvd
nvd
CVE-2022-2272
2022-08-03 16:15:08
cve
cve
CVE-2022-2272
2022-08-03 16:15:08
cvelist
cvelist
CVE-2022-2272
2022-08-03 15:20:59