Description
Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Medical Informatics Engineering | Enterprise Health | RC202503 – < RC202503 2025-04-08, RC202409 – < RC202409 2025-04-08, RC202403 – < RC202403 2025-04-08 | RC202503 2025-04-08 |
Advisories 1
- VA-25-272-01 Medical Informatics Engineering Enterprise Health multiple vulnerabilities CISA ICS & IT advisories · Sep 29, 2025