C-DAC e-Sushrut Improper Authentication Vulnerability Allowing Authentication Bypass

An authentication bypass vulnerability has been identified in the C-DAC e-Sushrut Hospital Management Information System (HMIS). This issue arises from improper authentication logic that depends on client-side response parameters to assess authentication status. A remote attacker could exploit this vulnerability by intercepting and altering the server response, thereby bypassing authentication and gaining unauthorized access to user accounts on the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to user accounts, allowing attackers to view or manipulate sensitive information.

Remediation

Contact C-DAC to upgrade e-Sushrut HMIS to the latest version.