PT-2022-17928 · Unknown · Hospital Management System

Published 2022-03-31 · Updated 2022-05-12 · CVE-2022-26546

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Hospital Management System version 1.0

Description The issue concerns a lack of an authorization component, allowing attackers to access sensitive information and obtain the admin password.

Recommendations For Hospital Management System version 1.0, consider implementing an authorization component to restrict access to sensitive information and protect the admin password. As a temporary workaround, restrict access to sensitive areas of the system until a proper authorization mechanism is in place.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2022-26546

Affected Products

Hospital Management System

References · 6

• 🔥❌ https://github.com/kabirkhyrul/HMS/discussions/12 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2022-26546 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26546 · Security Note
• https://t.me/cvenotify/30136 · Telegram Post
• https://t.me/cibsecurity/39941 · Telegram Post
• ❌ https://github.com/kabirkhyrul/HMS · Note, Deleted