The Sante PACS Server Web Portal has a critical vulnerability that allows credential information to be sent without encryption. This exposes sensitive data to potential interception during transmission. The vulnerability is classified as high severity due to its impact on integrity and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.1 | CVE-2025-54156 |
Exploitation
To exploit this vulnerability, an attacker can intercept network traffic between the Sante PACS Server Web Portal and its users. By leveraging the high attack complexity, the attacker can capture unencrypted credentials, allowing unauthorized access to sensitive information and systems.
Affected Products
- Sante PACS Server Web Portal: A web-based application for managing medical imaging data that lacks encryption for credential transmission.
Mitigation
To mitigate this vulnerability, it is essential to implement encryption for all credential transmissions within the Sante PACS Server Web Portal. Additionally, regular security audits and updates should be conducted to ensure compliance with best practices for data protection.