Описание
Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| orthanc | fixed | 1.5.8+dfsg-1 | package | |
| orthanc | no-dsa | trixie | package | |
| orthanc | no-dsa | bookworm | package |
Примечания
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-037-02
Exact fixing commit is unknown so far
EPSS
Связанные уязвимости
Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker.
Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker.
Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker.
Уязвимость сервера DICOM Orthanc, связанная с недостаточной защитой служебных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
EPSS