CVE-2024-6796: Vulnerability in Baxter Connex Health Portal
First published: Mon Sep 09 2024(Updated: )
In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized access to Connex portal's database and/or modify content.
Credit: productsecurity@baxter.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Baxter Connex Health Portal | <2024-08-30 |
Remedy
Baxter is unaware of any exploitation of this vulnerability in our product and/or the compromise of personal or health data. Baxter patched all impacted systems promptly to address this vulnerability. No user action is required.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-6796?
CVE-2024-6796 has a high severity rating due to its potential for unauthorized access to sensitive database information.
How do I fix CVE-2024-6796?
To fix CVE-2024-6796, update the Baxter Connex health portal to a version released after August 30, 2024.
What types of attacks can CVE-2024-6796 enable?
CVE-2024-6796 can enable unauthenticated attackers to gain unauthorized access and modify content in the Connex portal's database.
Is there a workaround for CVE-2024-6796?
Currently, there is no documented workaround for CVE-2024-6796; updating the software is recommended.
Who is affected by CVE-2024-6796?
Organizations using Baxter Connex health portal versions prior to August 30, 2024, are affected by CVE-2024-6796.
- agent/weakness
- agent/references
- agent/title
- agent/remedy
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- agent/source
- vendor/baxter
- canonical/baxter connex health portal