PT-2024-27872 · Unknown · Medicalis Workflow Orchestrator

Brett Gustafson · Published 2024-07-08 · Updated 2024-07-11 · CVE-2024-37999

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Medicalis Workflow Orchestrator (All versions)

Description A vulnerability has been identified in the affected application, which executes as a trusted account with high privileges and network access. This could allow an authenticated local attacker to escalate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-282

Related Identifiers

CVE-2024-37999

Affected Products

Medicalis Workflow Orchestrator

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-37999 · Security Note
• https://t.me/cvedetector/177 · Telegram Post
• https://twitter.com/cracbot/status/1811279304401342809 · Twitter Post
• https://twitter.com/CveFindCom/status/1810268630745043013 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1810289708573868428 · Twitter Post
• https://twitter.com/vuldb/status/1810302701626159463 · Twitter Post
• https://twitter.com/CVEnew/status/1810261068087800025 · Twitter Post
• https://t.me/cvenotify/85342 · Telegram Post
• https://twitter.com/cracbot/status/1810554588506050775 · Twitter Post
• https://siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-501799 · Note