PT-2022-15647 · Unknown · Sante Pacs Server

Florent Saudel · Published 2022-07-07 · Updated 2022-08-08 · CVE-2022-2272

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sante PACS Server version 3.0.4

Description This issue allows remote attackers to bypass authentication on affected installations. The flaw exists within the processing of calls to the "login endpoint". When parsing the username element, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this issue to bypass authentication on the system.

Recommendations For Sante PACS Server version 3.0.4, consider disabling the login endpoint until a patch is available to prevent exploitation. Restrict access to the SQL query construction process to minimize the risk of authentication bypass. Avoid using the username element in the affected login endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-2272

ZDI-22-955

Affected Products

Sante Pacs Server

References · 4

• https://zerodayinitiative.com/advisories/ZDI-22-955 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-2272 · Security Note
• https://osv.dev/vulnerability/CVE-2022-2272 · Vendor Advisory
• https://t.me/cibsecurity/47500 · Telegram Post