Vulnerability · Published Sep 9, 2024 · Assigned by Baxter
CVE-2024-6796Vulnerability in Baxter Connex Health Portal
High 8.2
In plain English
A high-severity improper access control in Connex Health Portal from Baxter. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.4%top 64.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized access to Connex portal's database and/or modify content.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Baxter | Connex Health Portal | 0 – before 8/30/2024 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N