PT-2025-20435 · Pixmeo · Pixmeo Osirix Md Web Portal

Chizuru Toyama · Publicado 2025-05-08 · Atualizado 2025-05-09 · CVE-2025-27720

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Pixmeo Osirix MD Web Portal (affected versions not specified)

Description The issue concerns the transmission of credential information without encryption by the Pixmeo Osirix MD Web Portal, potentially allowing an attacker to steal credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2025-27720

Produtos afetados

Pixmeo Osirix Md Web Portal

Referências · 7

• https://osirix-viewer.com/osirix/osirix-md · Nota
• https://cisa.gov/news-events/ics-medical-advisories/icsma-25-128-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-27720 · Nota de Segurança
• https://t.me/cvedetector/24884 · Publicação no Telegram
• https://osirix-viewer.com/about/contact · Nota
• https://twitter.com/CVEnew/status/1920612439009190014 · Publicação no Twitter
• https://t.me/cvetracker/23407 · Publicação no Telegram