Identity Claim Vulnerability in Philips Clinical Collaboration Platform

CVE-2020-16198

Summary

The Philips Clinical Collaboration Platform, up to version 12.2.1, is susceptible to a vulnerability where an attacker can falsely claim a specific identity within the system. This occurs due to the software's failure to adequately verify the authenticity of the identity claims, potentially allowing unauthorized access to sensitive information and functionality. This vulnerability poses significant risks to data integrity and security within medical environments where the platform is utilized.

References