CVE-2022-30277

Published: Jun 2, 2022Modified: Jun 17, 2026

5.7

Vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Exploitability: 0.5 / Impact: 5.2

Source: NVD

Description

BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII).

Affected (3)

Products: Bd: Synapsys

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Bd Synapsys	Version 4.20
Bd Synapsys	Version 4.20 sr1
Bd Synapsys	Version 4.30

Related CWEs

Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References (2)

https://cybersecurity.bd.com/bulletins-and-patches/bd-synapsys-insufficient-session-expiration

Source: cybersecurity@bd.com

Vendor Advisory

https://cybersecurity.bd.com/bulletins-and-patches/bd-synapsys-insufficient-session-expiration

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.