CVE-2024-50589 — Unprotected FHIR API
An unauthenticated attacker with access to the local network of the medical office can query an unprotected Fast Healthcare Interoperability Resources (FHIR) API to get access…
Published: 2024-11-08 · CVSS: 7.5 · CVSS 3.1
An unauthenticated attacker with access to the local network of the medical office can query an unprotected Fast Healthcare Interoperability Resources (FHIR) API to get access to sensitive electronic health records (EHR).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7