CVE-2013-4425

Name of the Vulnerable Software and Affected Versions OsiriX versions prior to 5.8 OsiriX versions prior to 2.5-MD

Description The issue concerns the DICOM listener in OsiriX, which uses a hardcoded password "SuperSecretPassword" to encrypt the TLS private key file when starting up. This allows local users to obtain the private key.

Recommendations For OsiriX versions prior to 5.8, update to version 5.8 or later to resolve the issue. For OsiriX versions prior to 2.5-MD, update to version 2.5-MD or later to resolve the issue.