The Sante PACS Server Web Portal has a critical vulnerability that allows credential information to be sent without encryption. This exposes sensitive data to potential interception during transmission. The vulnerability has been classified with a high severity rating, indicating a significant risk to users.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.1 | CVE-2025-54156 |
Exploitation
To exploit this vulnerability, an attacker could intercept the unencrypted credential information being transmitted over the network. Given the high attack complexity, the attacker would need to have access to the network where the Sante PACS Server Web Portal is operating, making it crucial for organizations to secure their network environments.
Affected Products
- Sante PACS Server Web Portal: A web-based application that allows users to manage and access medical imaging data, which is vulnerable due to unencrypted credential transmission.
Mitigation
To mitigate this vulnerability, it is essential to implement encryption for all credential transmissions within the Sante PACS Server Web Portal. Organizations should also review their network security measures to prevent unauthorized access and ensure that sensitive data is adequately protected during transmission.