project

Mirth Connect

Healthcare integration engine, sold by NextGen Healthcare as NextGen Connect, that routes and transforms clinical messages such as HL7 and XML between systems and stores connection credentials for each endpoint it serves.

Known aliases

NextGen Connect
NextGen Healthcare Mirth Connect

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

Authenticated SQL in Mirth Connect hands over the credentials for the systems it connects to

Three flaws in NextGen Healthcare Mirth Connect 4.7.1 and earlier share a single fix in version 4.7.2. The one that changes blast radius lets an authenticated user read the engine's stored credentials for connected systems.

Publishers:cisa.gov

Reality

Evidence62
Adoption: Insufficient
Hype gap−18
Incentives32
Confidence66