CVE-2022-30277: BD Synapsys™ – Insufficient Session Expiration
First published: Tue May 31 2022(Updated: )
BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII).
Credit: cybersecurity@bd.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| BD Synapsys | =4.20 | |
| BD Synapsys | =4.20-sr1 | |
| BD Synapsys | =4.30 |
Remedy
BD Synapsys™ v4.20 SR2 will be released in June 2022 and will remediate this vulnerability. Customers receiving BD Synapsys™ v4.30 will be allowed to upgrade to v5.10, which is expected to be available by August 2022.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-30277.
What is the severity of CVE-2022-30277?
The severity of CVE-2022-30277 is medium.
Which versions of BD Synapsys are affected by CVE-2022-30277?
BD Synapsys versions 4.20, 4.20 SR1, and 4.30 are affected by CVE-2022-30277.
What is the impact of exploiting CVE-2022-30277?
If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personal information.
How can I fix CVE-2022-30277?
To fix CVE-2022-30277, apply the necessary patches and updates provided by BD Synapsys.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/remedy
- agent/references
- agent/weakness
- agent/severity
- agent/title
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- vendor/bd
- canonical/bd synapsys
- version/bd synapsys/4.20
- version/bd synapsys/4.20-sr1
- version/bd synapsys/4.30