← CVE Intelligence

CVE-2024-50589

Unprotected FHIR API PUBLISHED

Description (CNA)

An unauthenticated attacker with access to the local network of the medical office can query an unprotected Fast Healthcare Interoperability Resources (FHIR) API to get access to sensitive electronic health records (EHR).

Affected (CNA)

Vendor / productVersions
HASOMED / Elefantaffected <24.04.00

CWE

CWE-306

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.