Vulnerabilities > Osehra

DATE CVE VULNERABILITY TITLE RISK
2013-12-04 CVE-2013-6945 Permissions, Privileges, and Access Controls vulnerability in Osehra Vista
The M2M Broker in OSEHRA VistA, as distributed before September 30, 2013, allows attackers to bypass authentication and authorization to perform doctor-only actions and read or modify patient records via unspecified vectors related to a "logic flaw."
network
low complexity
osehra CWE-264
7.5