| |
Vulnerability CVE-2022-30277
Published: 2022-06-02
| Description: |
BD Synapsys??, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). |
Type:
CWE-613 (Insufficient Session Expiration)
CVSS2 => (AV:L/AC:L/Au:N/C:P/I:P/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
3.6/10 |
4.9/10 |
3.9/10 |
| Exploit range |
Attack complexity |
Authentication |
Local |
Low |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
Partial |
None |
References: |
https://cybersecurity.bd.com/bulletins-and-patches/bd-synapsys-insufficient-session-expiration
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
