Vulnerabilities > CVE-2022-30277 - Insufficient Session Expiration vulnerability in BD Synapsys 4.20/4.30
Attack vector
PHYSICAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
NONE Summary
BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII).
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |