The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using "SuperSecretPassword" as the hardcoded password, which allows local users to obtain the private key.
CVSS 2.0
Severity: LOW
Problem Type: CWE-255,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| osirix-viewer | osirix | 3.3 |
| osirix-viewer | osirix | 1.7 |
| osirix-viewer | osirix | 1.4 |
| osirix-viewer | osirix | 3.7.1 |
| osirix-viewer | osirix | 5.6 |
| osirix-viewer | osirix | 2.7.5 |
| osirix-viewer | osirix | 1.5 |
| osirix-viewer | osirix | 1.6.3 |
| osirix-viewer | osirix | 1.5.1 |
| osirix-viewer | osirix | 1.6.5 |
| osirix-viewer | osirix | 2.5 |
| osirix-viewer | osirix | 2.4 |
| osirix-viewer | osirix | 1.1 |
| osirix-viewer | osirix | 2.6 |
| osirix-viewer | osirix | 3.1 |
| osirix-viewer | osirix | 1.1.2 |
| osirix-viewer | osirix_md | * |
| osirix-viewer | osirix | 1.3 |
| osirix-viewer | osirix | 1.6 |
| osirix-viewer | osirix | 4.1.2 |
| osirix-viewer | osirix | * |
| osirix-viewer | osirix | 1.0 |
| osirix-viewer | osirix | 3.0 |
| osirix-viewer | osirix | 2.1 |
| osirix-viewer | osirix | 1.2 |
| osirix-viewer | osirix | 2.2 |
| osirix-viewer | osirix | 2.3 |
| osirix-viewer | osirix | 3.2.1 |
| osirix-viewer | osirix | 1.6.4 |
| osirix-viewer | osirix | 5.5.2 |
| osirix-viewer | osirix | 0.2 |
| osirix-viewer | osirix | 2.3.1 |
| osirix-viewer | osirix | 4.0 |
| osirix-viewer | osirix | 3.9.4 |
| osirix-viewer | osirix | 2.0 |
| osirix-viewer | osirix | 1.7.1 |
| osirix-viewer | osirix | 3.5 |
| osirix-viewer | osirix | 3.8.1 |
| osirix-viewer | osirix | 1.5.2 |
| osirix-viewer | osirix | 5.0.2 |
| osirix-viewer | osirix | 1.6.2 |
| osirix-viewer | osirix | 3.6 |