CVE-2022-1067

MEDIO 6.5CVE-2022-1067 · Published 11/04/2022 · updated 17/06/2026

En resumen

CVE-2022-1067 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a patient portal (lifepoint).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.88%, mayor que el 59.5% de las vulnerabilidades.
Solución: actualizar a lpi_3.5.12.p30 o posterior.

Package	Affected versions	Patched versions
patient portal lifepoint	`< lpi_3.5.12.p30`	`lpi_3.5.12.p30`

Description

Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting.

References

cisa.gov/uscert/ics/advisories/icsma-22-095-01 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free