Vendor
J4Care
6 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Critical 9.1
J4Care dcm4che Missing Authentication for Critical Function
In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patient information and medical images. It can also use C-STORE to file fabricated study con…
-
Critical 9.1
J4Care dcm4che Missing Authorization
The storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states. Changing a location to TO_DELETE causes PurgeStorageScheduler to delete the referenced object from storage even thou…