The M2M Broker in OSEHRA VistA, as distributed before September 30, 2013, allows attackers to bypass authentication and authorization to perform doctor-only actions and read or modify patient records via unspecified vectors related to a "logic flaw."
Max CVSS
7.5
EPSS Score
0.11%
Published
2013-12-04
Updated
2014-02-25
1 vulnerabilities found