Quanta Computer QOCA aim AI Medical Cloud Platform Missing Authorization Vulnerability Allowing File Access Modification

A missing authorization vulnerability has been identified in the QOCA aim AI Medical Cloud Platform by Quanta Computer, affecting version 2.7.5 and earlier. This vulnerability allows authenticated remote attackers to alter specific parameters of network packets, thereby enabling certain system functions to access and modify files belonging to other users.

Impact

Exploitation of this vulnerability could lead to unauthorized access and modification of user files on the QOCA aim AI Medical Cloud Platform.

Remediation

Users are advised to update to version 2.7.6 or later.