CVE-2022-30277: BD Synapsys™ – Insufficient Session Expiration

Published Jun 1, 2022

Updated

BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII).

Affected Software

3 affected components

BD Synapsys=4.20

BD Synapsys=4.20-sr1

BD Synapsys=4.30

Remediation

Information

BD Synapsys™ v4.20 SR2 will be released in June 2022 and will remediate this vulnerability. Customers receiving BD Synapsys™ v4.30 will be allowed to upgrade to v5.10, which is expected to be available by August 2022.

Event History

Jun 1, 2022

CVE Published

via MITRE·04:38 PM

Data Sourced

via MITRE·04:38 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2022-30277.

What is the severity of CVE-2022-30277?

The severity of CVE-2022-30277 is medium.

Which versions of BD Synapsys are affected by CVE-2022-30277?

BD Synapsys versions 4.20, 4.20 SR1, and 4.30 are affected by CVE-2022-30277.

What is the impact of exploiting CVE-2022-30277?

If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personal information.

How can I fix CVE-2022-30277?

To fix CVE-2022-30277, apply the necessary patches and updates provided by BD Synapsys.