EUVD-2022-41328

Malicious code in bioql PyPI...

CVE-2022-38765

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter...

PT-2022-24557 · Canon Medical Informatics · Vitrea Vision

Name of the Vulnerable Software and Affected Versions: Canon Medical Informatics Vitrea Vision version 7.7.76.1 Description: The issue is related to inadequate access control enforcement, allowing an authenticated user to gain unauthorized access to imaging records. This can be achieved by...

CVE-2022-38765

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter...

CVE-2022-38765

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter...

CVE-2022-38765

The CVE-2022-38765 entry concerns Canon Medical Informatics Vitrea Vision 7.7.76.1, where insufficient access controls allow an authenticated user to access imaging records by tampering with the vitrea-view/studies/search endpoint’s patientId parameter. Affects confidentiality (high impact) with ...