C-DAC e-Sushrut Cryptographic Failure Vulnerability Allowing Unauthorized Access to Sensitive Information

A vulnerability in C-DAC's e-Sushrut Hospital Management Information System (HMIS) arises from the use of reversible Base64 encoding to protect sensitive data. This flaw allows authenticated attackers to decode and manipulate Base64-encoded parameters in the request URL, potentially gaining unauthorized access to sensitive information on the targeted system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, with potential implications for patient privacy and data security.

Remediation

Contact C-DAC to upgrade e-Sushrut HMIS to the latest version.