CVE-2024-6796: Vulnerability in Baxter Connex Health Portal

Q: What is the severity of CVE-2024-6796?

CVE-2024-6796 has a high severity rating due to its potential for unauthorized access to sensitive database information.

Q: How do I fix CVE-2024-6796?

To fix CVE-2024-6796, update the Baxter Connex health portal to a version released after August 30, 2024.

Q: What types of attacks can CVE-2024-6796 enable?

CVE-2024-6796 can enable unauthenticated attackers to gain unauthorized access and modify content in the Connex portal's database.

Q: Is there a workaround for CVE-2024-6796?

Currently, there is no documented workaround for CVE-2024-6796; updating the software is recommended.

Q: Who is affected by CVE-2024-6796?

Organizations using Baxter Connex health portal versions prior to August 30, 2024, are affected by CVE-2024-6796.

Published Sep 9, 2024

Updated

In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized access to Connex portal's database and/or modify content.

Affected Software

1 affected component

Baxter Connex Health Portal<2024-08-30

Remediation

Information

Baxter is unaware of any exploitation of this vulnerability in our product and/or the compromise of personal or health data. Baxter patched all impacted systems promptly to address this vulnerability. No user action is required.

Event History

Sep 9, 2024

CVE Published

via MITRE·07:28 PM

Data Sourced

via MITRE·07:28 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-6796?

CVE-2024-6796 has a high severity rating due to its potential for unauthorized access to sensitive database information.

How do I fix CVE-2024-6796?

To fix CVE-2024-6796, update the Baxter Connex health portal to a version released after August 30, 2024.

What types of attacks can CVE-2024-6796 enable?