CVE-2022-30277CWE-613

BD Synapsys™ – Insufficient Session Expiration

Medium · published June 1, 2022

CVSS v3.1
5.7
EPSS
0%
Percentile
13.3
In the wild
Unconfirmed
What it is

BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII).

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00232 · 13.3th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2022-06-01T16:38Z
EPSS history
Timeline
  • 01 JUN 16:38Z
    BD Synapsys™ – Insufficient Session Expiration
    cvelistv5