tocsin

Debian/orthanc: unknown

Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation. Successful exploitation could result in Privilege Escalation,

Action: Upgrade orthanc to 1.12.10+dfsg-1 or later.

Affected

introducedfixedlast affected
01.12.10+dfsg-1-

Fixed versions

1.12.10+dfsg-1

Sources

published · modified · JSON