PicoTronica e-Clinic Healthcare System Information Disclosure Vulnerability in Response Header Handler

A vulnerability allowing information disclosure has been identified in PicoTronica e-Clinic Healthcare System (ECHS) version 5.7. The issue arises in an unknown function within the Response Header Handler component, specifically in the file '/cdemos/echs/api/v2/'. This vulnerability can be exploited remotely, and the details of the exploit have been made public.

Impact

Exploitation of this vulnerability leads to unauthorized information disclosure via response headers and detailed authentication error messages.

Remediation

Upgrading to version 5.7.1 addresses this vulnerability. Users are advised to update to the latest version.