Change Healthcare kompaniyasining natijalari aniq
Ulanish sichqonchani tizimning mahalliy serveriga ulash imkonini beradi Ishlab chiqarish kodini kiritmang.
Change Healthcare Cardiology, Horizon Cardiology va McKesson Cardiology mahsulotlari amerikalik ishlab chiqaruvchidan klinicheskima Muammo (CVE-2018-18630) noto’g’ri kengayish bilan bog’liq, P.O.S.ni o’rnatishdan oldin oldindan o’rnatilgan fayllar mavjud. Asante Axborot xavfsizligi bo’yicha mutaxassislar Alphonse Pausa (Alfonso Pauers) va Bredley Shubina (Bradley Shubin) so’zlariga ko’ra, uspeshnaya ekspluatatsiya uyazvimosti mojet pozvolit zloumyshlenniku s mahalliy xizmat tizimi hech qanday ishlab chiqarish kodiga ko’chirilmasligi kerak.
Muammo mahsulotlarga ta’sir qiladi:
Horizon Cardiology 11.x va muammoli versiya;
Horizon Cardiology 12.x;
McKesson Cardiology 13.x;
McKesson Cardiology 14. x;
Change Healthcare Cardiology 14.1.x.
CVSS v3 mavjudligini tizim tan olishiga ko’ra, muammo 7,8 balldan keyin yuzaga kelgan Maksimal 10.
