GHSA-38qv-wpc5-5q7vHigh
Embedded private keys protected by a shared password can be used to sign practitioner assertions...
🔗 CVE IDs covered (1)
📋 Description
Embedded private keys protected by a shared password can be used to sign practitioner assertions for arbitrary practitioner identifiers, enabling unauthorized practitioner token requests.
🔗 References (4)
- https://nvd.nist.gov/vuln/detail/CVE-2026-118460
- https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-compugroup-medical
- https://www.cgm.com/ita_it/magazine/articles/comunicati-stampa/piu-sicurezza-per-farmacie-studi-medici-e-pazienti-cgm-italia-risolve-potenziali-vulnerabilita-software-insieme-a-csirt-italia.html
- https://github.com/advisories/GHSA-38qv-wpc5-5q7v