Описание
Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation.
Successful exploitation could result in Privilege Escalation, potentially allowing full administrative access.
Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation.
Successful exploitation could result in Privilege Escalation, potentially allowing full administrative access.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2025-15581
- https://discourse.orthanc-server.org/t/orthanc-1-12-10/6326
- https://lists.debian.org/debian-lts-announce/2026/02/msg00033.html
- https://orthanc.uclouvain.be/bugs/show_bug.cgi?id=252
- https://projectblack.io/blog/orthanc-1-12-9-user-impersonation/#exploitation
Связанные уязвимости
Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation. Successful exploitation could result in Privilege Escalation, potentially allowing full administrative access.
Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation. Successful exploitation could result in Privilege Escalation, potentially allowing full administrative access.
Orthanc versions before 1.12.10 are affected by an authorisation logic ...