Machine-generated analysis · WAYSCloud LLM
Version 5.35.1 of J4Care dcm4chee-arc-light is affected; a fix is provided in release 5.35.2.
Context
J4Care dcm4chee-arc-light 5.35.1 is the affected product. The advisory states that multiple vulnerabilities could enable deletion of stored medical images, disclosure of patient data, injection of forged studies, reassignment of records, file overwrites, and denial-of-service. J4Care recommends upgrading to version 5.35.2 or later to mitigate the issues.
Operator considerations
Check: Verify which version of dcm4chee-arc-light is deployed.
Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition.
Read the full advisory on CISA →