Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The login page in Epiphany Cardio Server 3.3, 4.0, and 4.1 mishandles authentication requests, which allows remote attackers to conduct LDAP injection attacks, and consequently bypass intended access restrictions, via a crafted URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Epiphany Healthcare Cardio Server 安全漏洞
Vulnerability Description
Epiphany Healthcare Cardio Server是英国Epiphany Healthcare公司的一套可扩展的心电图管理系统。该系统支持从任何地方访问和获取心电图信息以及诊断信息等。 Epiphany Healthcare Cardio Server的登陆页面中存在安全漏洞，该漏洞源于程序没有正确处理身份验证请求。远程攻击者可借助特制的URL利用该漏洞实施LDAP注入攻击，绕过既定的访问限制。以下版本受到影响：Epiphany Cardio Server 3.3版本，4.0版本，4.1版
CVSS Information
N/A
Vulnerability Type
N/A