CVE-2022-1067

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-288 CWE-287

Affected software

Vendor	Product	Versions
LifePoint Informatics	Patient Portal	>= All, < LPI 3.5.12.P30

References

https://www.cisa.gov/uscert/ics/advisories/icsma-22-095-01Third Party Advisory, US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsma-22-095-01Third Party Advisory, US Government Resource

Timeline

Published: Apr 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-10687.5Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may caus CVE-2022-10697.5A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22 CVE-2022-10708.1Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user crede CVE-2022-10718.2User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.CVE-2022-10739.8A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads to privilege escalati CVE-2022-10745.4A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input <h1>HTML Injection</h1> in the WiFi set CVE-2022-10755.4A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/c CVE-2022-10766.1A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aq CVE-2022-10777.5A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the compo CVE-2022-10789.8A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file CVE-2022-10796.1A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and par CVE-2022-10809.8A vulnerability was found in SourceCodester One Church Management System 1.0. It has been declared as critical. This vulnerability affects c