Beveiligingsadvies

CVE-2022-38765

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-12-08 00:00:00
Laatst bijgewerkt 2025-04-23 15:48:17
Toegewezen door mitre
CVSS-score 6.5
Status PUBLISHED

Beschrijving

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter.