CoreCVE
Back

MEDIUM

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls

Published Dec 8, 2022

Description

Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imaging records by tampering with the vitrea-view/studies/search patientId parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-639

Authorization Bypass

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 8, 2022
Updated Apr 23, 2025
Reserved Aug 25, 2022
Link CVE-2022-38765
CISA Vulnrichment
Updated Apr 23, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-38765
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-38765
ENISA EUVD
Assigner mitre
Published Dec 8, 2022
Updated Apr 23, 2025
Exploited since n/a
Link EUVD-2022-41328
EUVD-2022-41328