Access Control Vulnerability in Philips Clinical Collaboration Platform
CVE-2020-16247

7.1HIGH

Key Information:

Vendor

Philips
Status
Clinical Collaboration Platform
Vendor
CVE Published:
18 September 2020

What is CVE-2020-16247?

The Philips Clinical Collaboration Platform, up to version 12.2.1, suffers from an access control vulnerability that exposes sensitive resources to unauthorized users. This flaw allows unintended actors to gain access to critical information, potentially compromising patient data and system integrity. Organizations using this software should take immediate action to mitigate the risks associated with this vulnerability.

Affected Version(s)

Clinical Collaboration Platform 0 < 12.2.1

References

https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01
x_refsource_MISC
https://www.philips.com/a-w/security/security-advisories/...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.