Executive Summary

The vulnerability exists in epa4all-client, the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. In versions 1.2.4 and earlier, any network-reachable caller can write arbitrary documents to any patient's electronic health record that is accessible by the institution's SMC-B card.

This means that if the deployment is misconfigured, such as following the production Docker example in the README, an attacker on the local network can exploit this vulnerability without needing any credentials.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an attacker to write arbitrary documents into any patient's electronic health record accessible by the institution's SMC-B card.

Such unauthorized modifications can lead to data integrity issues, potentially causing incorrect medical information to be stored, which may affect patient care.

Because the exploit can be performed without credentials from the local network in misconfigured deployments, it increases the risk of unauthorized data manipulation.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows any network-reachable caller to write arbitrary documents to any patient's electronic health record accessible by the institution's SMC-B card, potentially leading to unauthorized modification of sensitive health data.

Such unauthorized data manipulation could violate data integrity and security requirements mandated by regulations like GDPR and HIPAA, which require protection of personal health information against unauthorized access and alteration.

Therefore, the vulnerability could negatively impact compliance with these standards by exposing patient records to unauthorized changes, risking breaches of confidentiality and data integrity.

Useful 0 Not Useful 0