Wowjoy Internet Doctor Workstation System Improper Authorization Vulnerability

An improper authorization vulnerability has been identified in Wowjoy's Internet Doctor Workstation System version 1.0. The issue resides in an unknown functionality of the file '/v1/pushConfig/detail/', allowing unauthorized access to sensitive user information such as names, ID card details, phone numbers, and medical conditions. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows unauthorized access to user information, including personal and medical details.

Reproduction

The vulnerability can be reproduced by sending a request to the '/v1/pushConfig/detail/' endpoint without proper authorization. This request will return sensitive user information, demonstrating the unauthorized access flaw.