Access Control Vulnerability in Philips Clinical Collaboration Platform
CVE-2020-16247

7.1HIGH

Key Information:

Vendor
Philips
Status
Philips Clinical Collaboration Platform
Vendor
CVE Published:
18 September 2020

Summary

The Philips Clinical Collaboration Platform, up to version 12.2.1, suffers from an access control vulnerability that exposes sensitive resources to unauthorized users. This flaw allows unintended actors to gain access to critical information, potentially compromising patient data and system integrity. Organizations using this software should take immediate action to mitigate the risks associated with this vulnerability.

Affected Version(s)

Philips Clinical Collaboration Platform Versions 12.2.1 and prior

References

https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01
x_refsource_MISC

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.