The Sante PACS Server Web Portal has a critical vulnerability that allows credential information to be sent without encryption. This exposes sensitive data to potential interception during transmission. The vulnerability has been rated with a high severity level, indicating significant risks to the integrity and availability of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.1 | CVE-2025-54156 |
Exploitation
To exploit this vulnerability, an attacker can intercept network traffic between the Sante PACS Server Web Portal and its users. By leveraging the high attack complexity, the attacker can capture unencrypted credential information, allowing unauthorized access to the system.
Affected Products
- Sante PACS Server Web Portal: A web-based application that manages medical imaging data, which is vulnerable due to unencrypted credential transmission.
Mitigation
To mitigate this vulnerability, it is essential to implement encryption for all credential transmissions within the Sante PACS Server Web Portal. Additionally, regular security audits and updates should be conducted to ensure that all components of the system are secure against potential threats.