CVE-2025-0896

Orthanc Server Missing Authentication for Critical Function PUBLISHED

Description (CNA)

Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker.

Affected (CNA)

Vendor / product	Versions
Orthanc / Orthanc server	affected 0 before 1.5.8

CWE

CWE-306

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-037-02

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.