← Back to CVEs
CVE-2022-30277
MEDIUM5.7
Description
BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII).
CVE Details
CVSS v3.1 Score5.7
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Attack VectorPHYSICAL
ComplexityLOW
Privileges RequiredLOW
User InteractionREQUIRED
Published6/2/2022
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
bd:synapsys
Weaknesses (CWE)
CWE-613CWE-613
References
https://cybersecurity.bd.com/bulletins-and-patches/bd-synapsys-insufficient-session-expiration(cybersecurity@bd.com)
https://cybersecurity.bd.com/bulletins-and-patches/bd-synapsys-insufficient-session-expiration(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.