PT-2026-115626 · J4Care · Dcm4Chee-Arc-Light
CVE-2026-97851
·
Publicado
2026-10-16
·
Atualizado
2026-10-16
CVSS v3.1
9.1
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
The storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states. Changing a location to TO DELETE causes PurgeStorageScheduler to delete the referenced object from storage even though the corresponding instance record remains in the database.
Correção
Missing Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dcm4Chee-Arc-Light