medium4.7
CVE-2025-15581
Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation.
Impact
Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation. Successful exploitation could result in Privilege Escalation, potentially allowing full administrative access.
Affected products
| Product | Affected versions |
|---|---|
| Orthanc | before 1.12.10 |
Versions were read from the advisory text. No structured product data has been published for this record yet.