Description
Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| LifePoint Informatics | Patient Portal | All – < LPI 3.5.12.P30 | LPI 3.5.12.P30 |
Advisories 1
- ICSMA-22-095-01 LifePoint Informatics Patient Portal CISA ICS & IT advisories · Apr 5, 2022