MedDream Web DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability

A vulnerability exists in MedDream Web DICOM Viewer due to the unencrypted transmission of credentials, allowing network-adjacent attackers to intercept and disclose sensitive information. This issue, which arises within the Web Portal, can be exploited without authentication, potentially leading to further compromise of the affected system.

Impact

Exploitation of this vulnerability allows for the interception and disclosure of transmitted credentials, which could be used to compromise the affected system.

Remediation

Users can upgrade to MedDream Web DICOM Viewer version 7.3.5.860 to address this vulnerability.