medium6.5
CVE-2022-1067
Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting.
Impact
Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lifepoint | Patient Portal | before lpi_3.5.12.p30 |