security1 publisher
Authenticated SQL in Mirth Connect hands over the credentials for the systems it connects to
Three flaws in NextGen Healthcare Mirth Connect 4.7.1 and earlier share a single fix in version 4.7.2. The one that changes blast radius lets an authenticated user read the engine's stored credentials for connected systems.
Publishers:cisa.gov
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap−18
- Incentives32
- Confidence66