The Sante PACS Server Web Portal has a critical vulnerability that allows credential information to be sent without encryption. This exposes sensitive data to potential interception during transmission. The vulnerability has been classified as critical due to its high base score and the potential impact on integrity and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.1 | CVE-2025-54156 |
Exploitation
To exploit this vulnerability, an attacker could intercept the unencrypted credential information being transmitted over the network. Given the high attack complexity, the attacker would need to have access to the network where the Sante PACS Server Web Portal is operating, making it crucial for organizations to secure their network environments.
Affected Products
- Sante PACS Server Web Portal: A web-based application used for managing medical imaging data, which is vulnerable due to the lack of encryption in credential transmission.
Mitigation
To mitigate this vulnerability, it is essential to implement encryption for all credential transmissions within the Sante PACS Server Web Portal. Organizations should also review their network security measures to prevent unauthorized access and ensure that sensitive data is adequately protected during transmission.