Improper Authentication in PerformanceBridge Focal Point and Patient Information Center iX - CVE-2020-16222
Published: September 11, 2020
Vulnerability identifier: #VU46648
CSH Severity: Medium
CVSS v4: 2.3 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-16222
CWE-ID: CWE-287
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to an error in when processing authentication requests. A remote attacker on the local network can bypass authentication process and gain unauthorized access to the application.
Affected software
PerformanceBridge Focal Point
Patient Information Center iX
Patient Information Center iX
How to mitigate CVE-2020-16222
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.