Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-037-02 | Third Party Advisory US Government Resource |
Configurations
History
30 Jul 2025, 18:11
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Orthanc-server
Orthanc-server orthanc |
|
| References | () https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-037-02 - Third Party Advisory, US Government Resource | |
| CPE | cpe:2.3:a:orthanc-server:orthanc:*:*:*:*:*:*:*:* |
13 Feb 2025, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-13 02:15
Updated : 2025-07-30 18:11
NVD link : CVE-2025-0896
Mitre link : CVE-2025-0896
JSON object : View
Products Affected
orthanc-server
- orthanc
CWE
CWE-306
Missing Authentication for Critical Function