Unauthenticated OIDC Token Leak in OHIF DICOMWebProxy

Executive Summary

This vulnerability involves two data sources, DICOMWebProxy and DICOMJSON, which in their default configuration fetch an arbitrary URL parameter without validating it. Because of this, a global authentication service in OHIF automatically injects the authenticated user's OIDC Bearer token into these requests. As a result, the token can be sent to an attacker-controlled server, potentially exposing sensitive authentication credentials.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, users should upgrade to OHIF version 3.12.2 or later, where the issue has been fixed.

• Remove unused DicomWebProxyDataSource and DicomJSONDataSource configurations.
• Minimize network exposure of the affected services.
• Use VPNs for remote access to reduce risk.
• Follow CISA's cybersecurity best practices.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unauthorized disclosure of the authenticated user's OIDC Bearer token to an attacker-controlled server. This could allow attackers to impersonate the user or gain unauthorized access to protected resources, leading to potential data breaches or unauthorized actions within the affected system.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability causes the OHIF global authentication service to automatically inject the authenticated user's OIDC Bearer token into requests sent to attacker-controlled servers. This results in unauthorized disclosure of sensitive authentication tokens.

Such unauthorized disclosure of authentication tokens can lead to compromise of user identities and access to protected health information or personal data, which may violate data protection regulations such as GDPR and HIPAA.

Therefore, this vulnerability potentially impacts compliance with standards and regulations that require protection of personal and health data by exposing sensitive authentication credentials to attackers.

Useful 0 Not Useful 0