Description (CNA)
Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.vitalimages.com/customer-success-support-program/vital-images-software-security-updates/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.