Authentication Bypass Vulnerability in e-Sushrut HMIS
This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status.
No CDAC-Noida vulnerabilities are listed in CISA KEV.
6 records
This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status.
This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses.
This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript.
This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data.
This vulnerability exists in e-Sushrut due to improper authorization checks during resource access.
This vulnerability exists in e-Sushrut due to improper access control in resource access validation.