← Database

CVE-2022-1067

MEDIUM CVSS: 6.5 Published: 2022-04-11 Modified: 2026-06-17

Description

Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting.

Affected Platforms

Lifepoint Patient Portal

Weakness Type

CWE-288, CWE-287

References