C-DAC e-Sushrut Improper Authorization Vulnerability Allowing Unauthorized Access to Patient Accounts

A vulnerability in the C-DAC e-Sushrut Hospital Management Information System (HMIS) has been identified, stemming from inadequate authorization checks during resource access. This flaw enables authenticated attackers to manipulate encoded parameters in the request URL, potentially gaining unauthorized access to patient accounts within the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to patient accounts, allowing attackers to view or manipulate sensitive medical information.

Remediation

Users are advised to contact C-DAC for instructions on upgrading to the latest version of the e-Sushrut HMIS.