An unauthenticated attacker can read worklist records from a directory outside the intended per-AE worklist storage area. In a multi-area deployment,...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An unauthenticated attacker can read worklist records from a directory outside the intended per-AE worklist storage area. In a multi-area deployment, this can cross departmental or clinic data separation.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 dcmtk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 dcmtk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-5+deb13u3"}]}]

Debian:14 dcmtk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0+really3.7.0-7"}]}]

参照URL

advisory security-tracker.debian.org