Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using "SuperSecretPassword" as the hardcoded password, which allows local users to obtain the private key.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pixmeo OsiriX Private Key 本地信息泄露漏洞
Vulnerability Description
OsiriX是瑞士Pixmeo公司的一套医疗图像处理软件。该软件可把CT（计算机断层扫描）和MRI（核磁共振）的数据加以整合生成3D图像，并支持对图像添加旋转、透视、动画等操作。 OsiriX 5.8之前的版本和2.5-MD之前的版本中的DICOM监听器中存在安全漏洞，该漏洞源于程序使用‘SuperSecretPassword’的硬编码密码加密包含私钥信息的文件。本地攻击者可利用该漏洞获取敏感信息的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A