CompuGroup Medical medical software multiple flaws (Infantia, Phronesis, Profim, Venere)
Medical record software can let attackers gain rights or impersonate doctors.
Summary
Medical software Infantia, Phronesis, Profim and Venere from CompuGroup Medical has several flaws, including XML external entity references, locally stored permissions and embedded private keys. Exploitation could raise privileges or yield tokens impersonating a practitioner.
What to do
Check that the product runs a version newer than the affected upper bound and read the vendor's advisory. No fixed version is named in the sources.
Products and platforms
CVE IDs
Sources
Times
First published
First seen